ActAs and Credential Delegation: update

Update the support for ws-trust 1.4 in Metro 2.0 for token delegation with ActAs to ensure interoperbility:

1. use ws-trust 1.4 namespace for ActAs: http://docs.oasis-open.org/ws-sx/ws-trust/200802
2. Create delegate SAML assertion with
   \* id and usual attributes for the original user
   \* actor attribute for the requestor:


<saml:Attribute AttributeName="actor"
AttributeNamespace="http://schemas.xmlsoap.com/ws/2009/09/identity/claims">
<saml:AttributeValue>
<saml:Attribute AttributeName="name"
AttributeNamespace="http://schemas.xmlsoap.org/ws/2005/05/identity/claims" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
<saml:AttributeValue>name</saml:AttributeValue>
</saml:Attribute>
</saml:AttributeValue>
</saml:Attribute>

Comments:

Post a Comment:
  • HTML Syntax: NOT allowed
About

Jiandong Guo

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today