[jboss-dev-forums] [Design of JBoss Identity] - SAML Assertions (JBossESB)

[jkurtz.wa@gmail.com]

All

I would like to begin the design process to empower JBoss ESB messages to use SAML assertions.  The first step would be to develop a set of requirements based on the JBoss ESB architecture and the SAML Standard.  

If we can refine these requirements and create test cases, we maybe able to submit them to be used as Compliance Tests - tests that demonstrate our application adheres to the SAML standard. XACML, another OASIS standard (but for authorization), has these and it helps development and insures credibility. 

I will get some requirements together and post them here. We can try to get at least the basic ones down and then try to design something. We should try to look into using new technology like SMOOKs and Drools to work with the SAML Assertion's XML and apply business rule. Open SAML is ok, but it is dated.

John L Kurtz

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4194671#4194671

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4194671