[jboss-jira] [JBoss JIRA] Created: (JBID-163) fill ProtocolBinding attribute of AuthnRequest messages

Sun Aug 9 18:06:29 EDT 2009

fill ProtocolBinding attribute of AuthnRequest messages
-------------------------------------------------------

                 Key: JBID-163
                 URL: https://jira.jboss.org/jira/browse/JBID-163
             Project: JBoss Identity
          Issue Type: Feature Request
          Components: Identity-Federation
    Affects Versions: IDFED-1.0.0.alpha5
            Reporter: Marcel Kolsteren
            Assignee: Anil Saldhana

According to the SAMLv2 specification, the attributes AssertionConsumerServiceURL and ProtocolBinding (both optional) typically accompany each other. I found that AuthnRequest messages sent by JBID to an OpenSSO IDP are rejected, because the AssertionConsumerServiceURL is filled, but the ProtocolBinding is left blank.

My proposal is to change the JBossSAMLAuthnRequestFactory so that it fills ProtocolBinding with HTTP-POST. As far as I know, the other possible binding for the assertion consumer, HTTP-Artifact, is not supported by JBID.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira