cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Oliver Wulff (Created) (JIRA)" <>
Subject [jira] [Created] (CXF-3883) Support for identity mapping as part of issue token process
Date Wed, 26 Oct 2011 09:55:32 GMT
Support for identity mapping as part of issue token process

                 Key: CXF-3883
             Project: CXF
          Issue Type: New Feature
          Components: Services
    Affects Versions: 2.5
            Reporter: Oliver Wulff

The JIRA describes the case where a CXF consumer
has configured a different STS than the issuer configured in the IssuedToken assertion of
the service provider:

In this case, the service consumer and provider don't understand the identity/subject/principal
of the counterpart. First, the consumer gets a token from its STS (IDP-STS) which could be
a SAML token. Then he requests another token from the STS and sends the one issued before
as part of the WS-Security header.

The STS must figure out that the sent and requested tokens are from different realms (security
domains) and must therefore call the configured identity mapper which takes as parameters
source realm, target realm and source principal.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:!default.jspa
For more information on JIRA, see:


View raw message