syncope-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Francesco Chicchiriccò (JIRA) <j...@apache.org>
Subject [jira] [Created] (SYNCOPE-1185) Further validate SAML responses with CXF's SAMLSSOResponseValidator
Date Thu, 03 Aug 2017 09:12:02 GMT
Francesco Chicchiriccò created SYNCOPE-1185:
-----------------------------------------------

             Summary: Further validate SAML responses with CXF's SAMLSSOResponseValidator
                 Key: SYNCOPE-1185
                 URL: https://issues.apache.org/jira/browse/SYNCOPE-1185
             Project: Syncope
          Issue Type: Improvement
          Components: extensions
            Reporter: Francesco Chicchiriccò
            Assignee: Francesco Chicchiriccò
             Fix For: 2.0.5, 2.1.0


At the moment, the SAML response is only validated via [SAMLProtocolResponseValidator|https://github.com/apache/cxf/blob/3.1.x-fixes/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLProtocolResponseValidator.java],
but CXF also offers [SAMLSSOResponseValidator|https://github.com/apache/cxf/blob/3.1.x-fixes/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLSSOResponseValidator.java],
providing further checks.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message