[ https://issues.apache.org/jira/browse/WSS-296?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Srinivasa Kukatla updated WSS-296:
----------------------------------
Attachment: Saml2ComponentBuilder.java
> SubjectLocality is missing from AuthenticationStatementBean
> -----------------------------------------------------------
>
> Key: WSS-296
> URL: https://issues.apache.org/jira/browse/WSS-296
> Project: WSS4J
> Issue Type: Bug
> Components: WSS4J Core, WSS4J Handlers
> Affects Versions: 1.6
> Environment: Eclipse, Maven, Tomcat
> Reporter: Srinivasa Kukatla
> Assignee: Colm O hEigeartaigh
> Labels: api-change
> Attachments: AuthenticationStatementBean.java, Saml2ComponentBuilder.java
>
>
> As per the saml2 core specification, Authentication Statement can have an optional SubjectLocality
as defined in the saml xsd below:
> <complexType name="AuthnStatementType">
> <complexContent>
> <extension base="saml:StatementAbstractType">
> <sequence>
> <element ref="saml:SubjectLocality" minOccurs="0" />
> <element ref="saml:AuthnContext" />
> </sequence>
> <attribute name="AuthnInstant" type="dateTime" use="required" />
> <attribute name="SessionIndex" type="string" use="optional" />
> <attribute name="SessionNotOnOrAfter" type="dateTime" use="optional" />
> </extension>
> </complexContent>
> </complexType>
> But, AuthenticationStatementBean does not have the SubjectLocalityBean.
> Please find the attached SubjectLocalityBean, as well as the AuthenticationStatementBean
updated with the SubjectLocalityBean.
> Example:
> <saml2:AuthnStatement AuthnInstant="2009-04-16T13:10:39.093Z">
> <saml2:SubjectLocality Address="11.01.124.22"
> DNSName="test"></saml2:SubjectLocality>
> <saml2:AuthnContext>
> <saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:X509
> </saml2:AuthnContextClassRef>
> </saml2:AuthnContext>
> </saml2:AuthnStatement>
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org
|