Author: anil.saldhana(a)jboss.com Date: 2009-04-20 23:28:49 -0400 (Mon, 20 Apr 2009) New Revision: 447 Added: identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/ identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/KeyDescriptorMetaDataBuilder.java identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/MetaDataBuilder.java identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/w3/ identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/w3/xmldsig/ identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/w3/xmldsig/KeyInfoBuilder.java identity-federation/trunk/jboss-identity-fed-api/src/test/java/org/jboss/test/identity/federation/api/saml/v2/metadata/ identity-federation/trunk/jboss-identity-fed-api/src/test/java/org/jboss/test/identity/federation/api/saml/v2/metadata/MetaDataBuilderUnitTestCase.java identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/metadata/ Modified: identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/constants/JBossSAMLConstants.java identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/constants/JBossSAMLURIConstants.java Log: JBID-42: metadata profile building blocks Added: identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/KeyDescriptorMetaDataBuilder.java =================================================================== --- identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/KeyDescriptorMetaDataBuilder.java (rev 0) +++ identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/KeyDescriptorMetaDataBuilder.java 2009-04-21 03:28:49 UTC (rev 447) @@ -0,0 +1,82 @@ +/* + * JBoss, Home of Professional Open Source. + * Copyright 2008, Red Hat Middleware LLC, and individual contributors + * as indicated by the @author tags. See the copyright.txt file in the + * distribution for a full listing of individual contributors. + * + * This is free software; you can redistribute it and/or modify it + * under the terms of the GNU Lesser General Public License as + * published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This software is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this software; if not, write to the Free + * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + * 02110-1301 USA, or see the FSF site: http://www.fsf.org. + */ +package org.jboss.identity.federation.api.saml.v2.metadata; + +import java.math.BigInteger; + +import org.jboss.identity.federation.saml.v2.metadata.KeyDescriptorType; +import org.jboss.identity.federation.saml.v2.metadata.KeyTypes; +import org.jboss.identity.federation.saml.v2.metadata.ObjectFactory; +import org.jboss.identity.xmlsec.w3.xmldsig.KeyInfoType; +import org.jboss.identity.xmlsec.w3.xmlenc.EncryptionMethodType; + +/** + * MetaDataBuilder for the KeyDescriptor + * @author Anil.Saldhana(a)redhat.com + * @since Apr 20, 2009 + */ +public class KeyDescriptorMetaDataBuilder +{ + /** + * Create a Key Descriptor Type + * @return + */ + public static KeyDescriptorType createKeyDescriptor(KeyInfoType keyInfo, + String algorithm, int keySize, + boolean isSigningKey, boolean isEncryptionKey) + { + if(keyInfo == null) + throw new IllegalArgumentException("keyInfo is null"); + + if(isSigningKey == isEncryptionKey) + throw new IllegalArgumentException("Only one of isSigningKey " + + "and isEncryptionKey should be true"); + + KeyDescriptorType keyDescriptor = getObjectFactory().createKeyDescriptorType(); + + if(algorithm != null && algorithm.length() > 0) + { + EncryptionMethodType encryptionMethod = new EncryptionMethodType(); + encryptionMethod.setAlgorithm(algorithm); + + encryptionMethod.getContent().add(BigInteger.valueOf(keySize)); + + keyDescriptor.getEncryptionMethod().add(encryptionMethod); + } + + if(isSigningKey) + keyDescriptor.setUse(KeyTypes.SIGNING); + if(isEncryptionKey) + keyDescriptor.setUse(KeyTypes.ENCRYPTION); + + return keyDescriptor; + } + + /** + * Return the metadata object factory + * @return + */ + public static ObjectFactory getObjectFactory() + { + return MetaDataBuilder.getObjectFactory(); + } +} \ No newline at end of file Added: identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/MetaDataBuilder.java =================================================================== --- identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/MetaDataBuilder.java (rev 0) +++ identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/saml/v2/metadata/MetaDataBuilder.java 2009-04-21 03:28:49 UTC (rev 447) @@ -0,0 +1,178 @@ +/* + * JBoss, Home of Professional Open Source. + * Copyright 2008, Red Hat Middleware LLC, and individual contributors + * as indicated by the @author tags. See the copyright.txt file in the + * distribution for a full listing of individual contributors. + * + * This is free software; you can redistribute it and/or modify it + * under the terms of the GNU Lesser General Public License as + * published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This software is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this software; if not, write to the Free + * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + * 02110-1301 USA, or see the FSF site: http://www.fsf.org. + */ +package org.jboss.identity.federation.api.saml.v2.metadata; + +import java.util.List; + +import org.jboss.identity.federation.core.saml.v2.constants.JBossSAMLConstants; +import org.jboss.identity.federation.saml.v2.assertion.AttributeType; +import org.jboss.identity.federation.saml.v2.metadata.EndpointType; +import org.jboss.identity.federation.saml.v2.metadata.EntityDescriptorType; +import org.jboss.identity.federation.saml.v2.metadata.IDPSSODescriptorType; +import org.jboss.identity.federation.saml.v2.metadata.KeyDescriptorType; +import org.jboss.identity.federation.saml.v2.metadata.LocalizedNameType; +import org.jboss.identity.federation.saml.v2.metadata.LocalizedURIType; +import org.jboss.identity.federation.saml.v2.metadata.ObjectFactory; +import org.jboss.identity.federation.saml.v2.metadata.OrganizationType; +import org.jboss.identity.federation.saml.v2.metadata.SPSSODescriptorType; +import org.jboss.identity.federation.saml.v2.metadata.SSODescriptorType; + +/** + * SAML2 Metadata Builder API + * @author Anil.Saldhana(a)redhat.com + * @since Apr 19, 2009 + */ +public class MetaDataBuilder +{ + private static ObjectFactory oFact = new ObjectFactory(); + + /** + * Create an Endpoint (SingleSignOnEndpoint or SingleLogoutEndpoint) + * @param binding + * @param location + * @param responseLocation + * @return + */ + public static EndpointType createEndpoint(String binding, String location, + String responseLocation) + { + EndpointType endpoint = oFact.createEndpointType(); + endpoint.setBinding(binding); + endpoint.setLocation(location); + endpoint.setResponseLocation(responseLocation); + return endpoint; + } + + /** + * Create an Organization + * @param organizationName + * @param organizationDisplayName + * @param organizationURL + * @param lang + * @return + */ + public static OrganizationType createOrganization(String organizationName, + String organizationDisplayName, String organizationURL, String lang) + { + if(organizationName == null) + throw new IllegalArgumentException("organizationName is null"); + if(organizationDisplayName == null) + throw new IllegalArgumentException("organizationDisplayName is null"); + if(organizationURL == null) + throw new IllegalArgumentException("organizationURL is null"); + if(lang == null) + lang = JBossSAMLConstants.LANG_EN.get(); + + //orgName + LocalizedNameType orgName = oFact.createLocalizedNameType(); + orgName.setValue(organizationName); + orgName.setLang(lang); + + //orgDisplayName + LocalizedNameType orgDisplayName = oFact.createLocalizedNameType(); + orgDisplayName.setValue(organizationDisplayName); + orgDisplayName.setLang(lang); + + //orgURL + LocalizedURIType orgURL = oFact.createLocalizedURIType(); + orgURL.setValue(organizationURL); + orgURL.setLang(lang); + + OrganizationType orgType = oFact.createOrganizationType(); + orgType.getOrganizationName().add(orgName); + orgType.getOrganizationDisplayName().add(orgDisplayName); + orgType.getOrganizationURL().add(orgURL); + return orgType; + } + + /** + * Create an Entity Descriptor + * @param idpOrSPDescriptor a descriptor for either the IDP or SSO + * @return + */ + public static EntityDescriptorType createEntityDescriptor(SSODescriptorType idpOrSPDescriptor) + { + EntityDescriptorType entity = oFact.createEntityDescriptorType(); + entity.getRoleDescriptorOrIDPSSODescriptorOrSPSSODescriptor().add(idpOrSPDescriptor); + return entity; + } + + /** + * Create a IDP SSO metadata descriptor + * @param requestsSigned + * @param keyDescriptorType + * @param ssoEndPoint + * @param sloEndPoint + * @param attributes + * @param org + * @return + */ + public static IDPSSODescriptorType createIDPSSODescriptor(boolean requestsSigned, + KeyDescriptorType keyDescriptorType, + EndpointType ssoEndPoint, + EndpointType sloEndPoint, + List<AttributeType> attributes, + OrganizationType org) + { + IDPSSODescriptorType idp = oFact.createIDPSSODescriptorType(); + idp.getSingleSignOnService().add(ssoEndPoint); + idp.getSingleLogoutService().add(sloEndPoint); + idp.getAttribute().addAll(attributes); + idp.getKeyDescriptor().add(keyDescriptorType); + idp.setWantAuthnRequestsSigned(requestsSigned); + idp.setOrganization(org); + return idp; + } + + /** + * Create a IDP SSO metadata descriptor + * @param requestsSigned + * @param keyDescriptorType + * @param ssoEndPoint + * @param sloEndPoint + * @param attributes + * @param org + * @return + */ + public static SPSSODescriptorType createSPSSODescriptor(boolean requestsSigned, + KeyDescriptorType keyDescriptorType, + EndpointType sloEndPoint, + List<AttributeType> attributes, + OrganizationType org) + { + SPSSODescriptorType sp = oFact.createSPSSODescriptorType(); + sp.getSingleLogoutService().add(sloEndPoint); + sp.getKeyDescriptor().add(keyDescriptorType); + sp.setAuthnRequestsSigned(requestsSigned); + sp.setOrganization(org); + return sp; + } + + /** + * Get the ObjectFactory for method chaining + * @return + */ + public static ObjectFactory getObjectFactory() + { + return oFact; + } +} \ No newline at end of file Added: identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/w3/xmldsig/KeyInfoBuilder.java =================================================================== --- identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/w3/xmldsig/KeyInfoBuilder.java (rev 0) +++ identity-federation/trunk/jboss-identity-fed-api/src/main/java/org/jboss/identity/federation/api/w3/xmldsig/KeyInfoBuilder.java 2009-04-21 03:28:49 UTC (rev 447) @@ -0,0 +1,57 @@ +/* + * JBoss, Home of Professional Open Source. + * Copyright 2008, Red Hat Middleware LLC, and individual contributors + * as indicated by the @author tags. See the copyright.txt file in the + * distribution for a full listing of individual contributors. + * + * This is free software; you can redistribute it and/or modify it + * under the terms of the GNU Lesser General Public License as + * published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This software is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this software; if not, write to the Free + * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + * 02110-1301 USA, or see the FSF site: http://www.fsf.org. + */ +package org.jboss.identity.federation.api.w3.xmldsig; + +import org.jboss.identity.xmlsec.w3.xmldsig.KeyInfoType; +import org.jboss.identity.xmlsec.w3.xmldsig.ObjectFactory; + + +/** + * Builder for the W3C xml-dsig KeyInfoType + * @author Anil.Saldhana(a)redhat.com + * @since Apr 20, 2009 + */ +public class KeyInfoBuilder +{ + private static ObjectFactory oFact = new ObjectFactory(); + + /** + * Create a KeyInfoType + * @return + */ + public static KeyInfoType createKeyInfo(String id) + { + KeyInfoType keyInfo = oFact.createKeyInfoType(); + + keyInfo.setId(id); + return keyInfo; + } + + /** + * Return the object factory. Useful in method chaining + * @return + */ + public static ObjectFactory getObjectFactory() + { + return oFact; + } +} \ No newline at end of file Added: identity-federation/trunk/jboss-identity-fed-api/src/test/java/org/jboss/test/identity/federation/api/saml/v2/metadata/MetaDataBuilderUnitTestCase.java =================================================================== --- identity-federation/trunk/jboss-identity-fed-api/src/test/java/org/jboss/test/identity/federation/api/saml/v2/metadata/MetaDataBuilderUnitTestCase.java (rev 0) +++ identity-federation/trunk/jboss-identity-fed-api/src/test/java/org/jboss/test/identity/federation/api/saml/v2/metadata/MetaDataBuilderUnitTestCase.java 2009-04-21 03:28:49 UTC (rev 447) @@ -0,0 +1,168 @@ +/* + * JBoss, Home of Professional Open Source. + * Copyright 2008, Red Hat Middleware LLC, and individual contributors + * as indicated by the @author tags. See the copyright.txt file in the + * distribution for a full listing of individual contributors. + * + * This is free software; you can redistribute it and/or modify it + * under the terms of the GNU Lesser General Public License as + * published by the Free Software Foundation; either version 2.1 of + * the License, or (at your option) any later version. + * + * This software is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with this software; if not, write to the Free + * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA + * 02110-1301 USA, or see the FSF site: http://www.fsf.org. + */ +package org.jboss.test.identity.federation.api.saml.v2.metadata; + +import static org.junit.Assert.*; + +import java.util.ArrayList; +import java.util.List; + +import org.jboss.identity.federation.api.saml.v2.metadata.KeyDescriptorMetaDataBuilder; +import org.jboss.identity.federation.api.saml.v2.metadata.MetaDataBuilder; +import org.jboss.identity.federation.api.w3.xmldsig.KeyInfoBuilder; +import org.jboss.identity.federation.core.saml.v2.constants.JBossSAMLURIConstants; +import org.jboss.identity.federation.saml.v2.assertion.AttributeType; +import org.jboss.identity.federation.saml.v2.metadata.EndpointType; +import org.jboss.identity.federation.saml.v2.metadata.EntityDescriptorType; +import org.jboss.identity.federation.saml.v2.metadata.IDPSSODescriptorType; +import org.jboss.identity.federation.saml.v2.metadata.KeyDescriptorType; +import org.jboss.identity.federation.saml.v2.metadata.OrganizationType; +import org.jboss.identity.federation.saml.v2.metadata.SPSSODescriptorType; +import org.jboss.identity.xmlsec.w3.xmldsig.KeyInfoType; +import org.junit.Test; + +/** + * Unit test the MetaDataBuilder API + * @author Anil.Saldhana(a)redhat.com + * @since Apr 20, 2009 + */ +public class MetaDataBuilderUnitTestCase +{ + String organizationName = "JBoss"; + String organizationDisplayName = "JBoss Unit"; + String organizationURL = "http://www.jboss.org"; + String lang = "en"; + + + @Test + public void testCreateOrganization() + { + OrganizationType org = createJBossOrganization("en"); + + assertNotNull("Org is not null", org); + assertEquals(organizationName,org.getOrganizationName().get(0).getValue()); + assertEquals(organizationDisplayName, org.getOrganizationDisplayName().get(0).getValue()); + assertEquals(organizationURL, org.getOrganizationURL().get(0).getValue()); + + //Check the lang + assertEquals(lang, org.getOrganizationName().get(0).getLang()); + assertEquals(lang, org.getOrganizationDisplayName().get(0).getLang()); + assertEquals(lang, org.getOrganizationURL().get(0).getLang()); + } + + @Test + public void testCreateEntityDescriptor() + { + IDPSSODescriptorType idp = this.createIDPSSODescriptor(); + EntityDescriptorType idpEntity = MetaDataBuilder.createEntityDescriptor(idp); + assertNotNull("IDP Entity Descriptor not null", idpEntity); + + SPSSODescriptorType sp = this.createSPSSODescriptor(); + EntityDescriptorType spEntity = MetaDataBuilder.createEntityDescriptor(sp); + assertNotNull("SP Entity Descriptor not null", spEntity); + } + + @Test + public void testCreateIDPSSODescriptor() + { + IDPSSODescriptorType idp = this.createIDPSSODescriptor(); + assertNotNull("IDPSSODescriptor is not null", idp); + } + + @Test + public void testCreateSPSSODescriptor() + { + SPSSODescriptorType sp = createSPSSODescriptor(); + + assertNotNull("IDPSSODescriptor is not null", sp); + } + + private SPSSODescriptorType createSPSSODescriptor() + { + String id = "test-key"; + + //TODO: improve keyinfo + KeyInfoType keyInfo = KeyInfoBuilder.createKeyInfo(id); + + String algorithm = null; + + KeyDescriptorType keyDescriptorType = + KeyDescriptorMetaDataBuilder.createKeyDescriptor(keyInfo, + algorithm, 0, true, false); + + List<AttributeType> attributes = new ArrayList<AttributeType>(); + + EndpointType sloEndPoint = MetaDataBuilder.createEndpoint( + JBossSAMLURIConstants.METADATA_HTTP_REDIRECT_BINDING.get(), + "https://SProvider.com/SAML/SLO/Browser", + "https://SProvider.com/SAML/SLO/Response"); + + SPSSODescriptorType sp = MetaDataBuilder.createSPSSODescriptor(true, + keyDescriptorType, + sloEndPoint, + attributes, + createJBossOrganization(lang)); + return sp; + } + + private OrganizationType createJBossOrganization(String language) + { + return MetaDataBuilder.createOrganization(organizationName, + organizationDisplayName, + organizationURL, + language); + } + + private IDPSSODescriptorType createIDPSSODescriptor() + { + String id = "test-key"; + + //TODO: improve keyinfo + KeyInfoType keyInfo = KeyInfoBuilder.createKeyInfo(id); + + String algorithm = null; + + KeyDescriptorType keyDescriptorType = + KeyDescriptorMetaDataBuilder.createKeyDescriptor(keyInfo, + algorithm, 0, true, false); + + List<AttributeType> attributes = new ArrayList<AttributeType>(); + + EndpointType ssoEndPoint = MetaDataBuilder.createEndpoint( + JBossSAMLURIConstants.METADATA_HTTP_REDIRECT_BINDING.get(), + "https://IdentityProvider.com/SAML/SSO/Browser", + "https://IdentityProvider.com/SAML/SSO/Response"); + + EndpointType sloEndPoint = MetaDataBuilder.createEndpoint( + JBossSAMLURIConstants.METADATA_HTTP_REDIRECT_BINDING.get(), + "https://IdentityProvider.com/SAML/SLO/Browser", + "https://IdentityProvider.com/SAML/SLO/Response"); + + return MetaDataBuilder.createIDPSSODescriptor(true, + keyDescriptorType, + ssoEndPoint, + sloEndPoint, + attributes, + createJBossOrganization(lang)); + + } +} \ No newline at end of file Modified: identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/constants/JBossSAMLConstants.java =================================================================== --- identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/constants/JBossSAMLConstants.java 2009-04-20 16:04:30 UTC (rev 446) +++ identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/constants/JBossSAMLConstants.java 2009-04-21 03:28:49 UTC (rev 447) @@ -28,6 +28,7 @@ */ public enum JBossSAMLConstants { + LANG_EN("en"), SIGNATURE_SHA1_WITH_DSA("SHA1withDSA"), SIGNATURE_SHA1_WITH_RSA("SHA1withRSA"), VERSION_2_0("2.0"); Modified: identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/constants/JBossSAMLURIConstants.java =================================================================== --- identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/constants/JBossSAMLURIConstants.java 2009-04-20 16:04:30 UTC (rev 446) +++ identity-federation/trunk/jboss-identity-fed-core/src/main/java/org/jboss/identity/federation/core/saml/v2/constants/JBossSAMLURIConstants.java 2009-04-21 03:28:49 UTC (rev 447) @@ -32,19 +32,31 @@ AC_PASSWORD_PROTECTED_TRANSPORT("urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"), ASSERTION_NSURI("urn:oasis:names:tc:SAML:2.0:assertion"), ATTRIBUTE_FORMAT_BASIC("urn:oasis:names:tc:SAML:2.0:attrname-format:basic"), + + METADATA_HTTP_REDIRECT_BINDING("urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"), + NAMEID_FORMAT_TRANSIENT("urn:oasis:names:tc:SAML:2.0:nameid-format:transient"), NAMEID_FORMAT_PERSISTENT("urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"), + PROTOCOL_NSURI("urn:oasis:names:tc:SAML:2.0:protocol"), + SIGNATURE_DSA_SHA1("http://www.w3.org/2000/09/xmldsig#dsa-sha1"), SIGNATURE_RSA_SHA1("http://www.w3.org/2000/09/xmldsig#rsa-sha1"), + SUBJECT_CONFIRMATION_BEARER("urn:oasis:names:tc:SAML:2.0:cm:bearer"), + + STATUS_AUTHNFAILED("urn:oasis:names:tc:SAML:2.0:status:AuthnFailed"), STATUS_REQUESTOR("urn:oasis:names:tc:SAML:2.0:status:Requestor"), STATUS_RESPONDER("urn:oasis:names:tc:SAML:2.0:status:Responder"), STATUS_SUCCESS("urn:oasis:names:tc:SAML:2.0:status:Success"), STATUS_VERSION_MISMATCH("urn:oasis:names:tc:SAML:2.0:status:VersionMismatch"), + + TRANSFORM_ENVELOPED_SIGNATURE("http://www.w3.org/2000/09/xmldsig#env..., TRANSFORM_C14N_EXCL_OMIT_COMMENTS("http://www.w3.org/2001/10/xml-exc..., + + XMLSCHEMA_NSURI("http://www.w3.org/2001/XMLSchema"), XMLDSIG_NSURI("http://www.w3.org/2000/09/xmldsig#"), XMLENC_NSURI("http://www.w3.org/2001/04/xmlenc#");