Friday 15 May 2015

java - Signature Attribute Values in SAML 2.0 -


I am in the process of creating a SAML 2.0 response from the IDP to SP. The following SAML 2.0 features are:

  `<& lt; what is the requirement to obtain the values ​​of SAML 2.0 attributes from the certificate I received? Ds: SignatureValue & gt; The value from the certificate & lt; / Ds: SignatureValue & gt; & Lt; DS: DigestValue & gt; The value from the certificate & lt; / Ds: DigestValue & gt; Anyone else can guide me that the steps I need to demonstrate towards SIP are to properly verify the certified signature value of the given certificate. Can do for  

Thank you!

is an oracle tutorial how to validate XML digital signature using java.xml .crypto.dsig API:

Unfortunately I did not really have a simple time to download the code sample. I've learned a bit of a sample verification code.

There is another good article.

At some point you will need to get your SP's public key from the certificate and provide it with your verification code - which is included in the tutorial under the section, to remove the certificate from keytool You can use the command and add it to a keystore. Sometimes this key / certificate exchange comes from offline; Sometimes the key is within the SAML document & lt; KeyInfo & gt; . Within X.509 comes in the form of data.


No comments:

Post a Comment