Hi Murali

Have you been able to progress on this matter? I looked into the STS sample that ships with WSAS and was looking at the corresponding client code.. probably its easiest to implement the client side logic in a custom mediator for your case, and let Rampart handle the rest.. i.e. your custom mediator would then talk to the STS get the token and then place at the right place, before your actual call to the service is invoked.

Let us know more details on the STS and other questions Ruchith asked and if you have got some sample code working with your STS

asankha

cmurali wrote:
Hi,

I am new to SAML and don't know the complete process flow.

I downloaded the wso2wsas-2.1-src.zip and found the sts-sample. But the
documentation (Security Service Token Sample Guide) is in terms of WSO2 WSAS
administration console. Is there any documentation that explains about the
sts.policy file, service.policy file and axis2.policy file and changes that
should go in for configuring for SAML?
I have already configured synapse to perform usernametoken authentication
and forward SOAP request to jboss server. This works fine. Right now we are
mandated to use the "Token issuing service' provided by another group called
single-sign-on  group.  So my job, right now, is to configure my synapse to
process the SAML token. Processing means validating the token and would I
have to communicate with the token issuing service for validating? If so, is
there any hook like the rampart PWCBHandler class in which I have to handle
that?

Thanks,
Muralidaran Chakravarthy


Ruchith Fernando wrote:
Hi,

Can you please have a look at "sts-sample" in WSO2 WSAS [1] This does
exactly what you need. The client code is available in the sample
itself and you can see the code here [2] as well.

Thanks,
Ruchith

1. http://dist.wso2.org/products/wsas/java/2.1
2.
http://wso2.org/repos/wso2/trunk/wsas/java/modules/samples/sts-sample/src/org/wso2/wsas/sample/sts/client/Client.java

On 10/22/07, cmurali <[EMAIL PROTECTED]> wrote:
Hi,

I am trying to find a complete example to setup synapse/rampart/rahas for
mainly processing SAML messages. I am also looking for sample client code
for testing both the producer and processor of Security token messages.
The
scenario is like this.

1. Client contacts the token issuer.
2. STS service gives back the secure token.
3. Client inserts this token into the SOAP security header.
4. Sends this message to the security message processor.
5. Client gets a response back.

Thanks,
Muralidaran Chakravarthy
--
View this message in context:
http://www.nabble.com/Confugring-rampart-Rahas-for-producing-and-processing-SAML-messages.-tf4670568.html#a13342361
Sent from the Synapse - Dev mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


--
www.ruchith.org
www.wso2.org

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




Reply via email to