[seam-issues] [JBoss JIRA] (SEAMSECURITY-150) Seam Security external saml sp metadata errors vs. saml-schema-metadata-2.0.xsd

Fri Jun 1 07:18:17 EDT 2012

Richard Welteroth created SEAMSECURITY-150:
----------------------------------------------

             Summary: Seam Security external saml sp metadata errors vs. saml-schema-metadata-2.0.xsd
                 Key: SEAMSECURITY-150
                 URL: https://issues.jboss.org/browse/SEAMSECURITY-150
             Project: Seam Security
          Issue Type: Bug
    Affects Versions: 3.1.0.Final
         Environment: JBoss AS 7.1.0, Windows, JavaEE6
            Reporter: Richard Welteroth


Two bugs concerning the evaluation of IdP Metadata by a SP implementation: 

org.jboss.seam.security.external.saml.sp.SamlExternalIdentityProvider expects WantAuthnRequestSigned attribute of IDPSSODescriptor to exist although it is optional as to the XSD

org.jboss.seam.security.external.saml.sp.SamlSpBean expects IDPSSODescriptor to be first in list of roledescriptors though XSD also allows other descriptors to appear before IDPSSODescriptor

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira