Hi,

In our case here, we would like our trusted services to only respond to
> requests that contain a valid SAML Token issued by the STS. On the
> samples,
> it doesn't seem to make any difference on the service response whether i
> add
> the token to the request or not.


If  I understand correctly, you have a Issued token as a supporting token in
the
service policy. When I went through the code, that there is a problem in
validating
the supporting tokens according to the given policy in Rampart. BTW, this
not
specific to SAML Tokens, all supporting tokens suffer from this problem.
This should be
fixed in Rampart. Please go on and create a JiRA in Rampart.

Thanks,
Nandana

Reply via email to