users@glassfish.java.net

Re: SAML attributes and DisplayToken

From: <glassfish_at_javadesktop.org>
Date: Mon, 26 Jan 2009 11:34:21 PST

> Hi,
>
> this might be the the same issue as
> https://wsit.dev.java.net/issues/show_bug.cgi?id=1083.
Yes it it the same issue. We are fixing it.
>
> I've looked in the code of the
> com.sun.xml.ws.security.trust.impl.DefaultSAMLTokenPro
> vider, it seems that the code to add the attributes
> to the token is commented out.
>
> Regarding the DisplayToken:
>
> The DisplayToken generated by Metro
> [code]
> <RequestedDisplayToken:RequestedDisplayToken
> xmlns="http://schemas.xmlsoap.org/ws/2005/05/identity"
> xmlns:RequestedDisplayToken="http://schemas.xmlsoap.or
> g/ws/2005/05/identity">
> <DisplayToken>
> <DisplayClaim Uri="http://namespace/localPart"
> xmlns=""
> xmlns:ns12="http://schemas.xmlsoap.org/ws/2005/05/ide
> tity">
>
> ns12:DisplayTag>localPart</ns12:DisplayTag>
>
> ns12:DisplayValue>string1</ns12:DisplayValue>
> </DisplayClaim>
> <DisplayClaim Uri="http://sun.com/token-requestor"
> xmlns=""
> xmlns:ns12="http://schemas.xmlsoap.org/ws/2005/05/iden
> tity">
>
> ns12:DisplayTag>token-requestor</ns12:DisplayTag>
>
> ns12:DisplayValue>authenticated</ns12:DisplayValue>
> </DisplayClaim>
> splayToken>
> </RequestedDisplayToken:RequestedDisplayToken>
> de]
>
> is not correct:
> - The default namespace declaration for DisplayClaim
> is an empty string.
Thanks for pointing this out. We will look into it.
> - Regarding
> http://schemas.xmlsoap.org/ws/2005/05/identity/Identit
> y_Selector_Interoperability_Profile_V1.5.pdf
> DisplayToken must have a xml:lang attribute.
Ok. We will add it. In any case, Cardspace accepts it without xml:lang set.

This is Metro issues. To get timely responses, it is better to post it in Metro forum:

http://forums.java.net/jive/forum.jspa?forumID=46

Thanks!

Jiandong
[Message sent by forum member 'jdg6688' (jdg6688)]

http://forums.java.net/jive/thread.jspa?messageID=328242