SAML 1.1 help
Kevin Brown
kevinbrownbdc at gmail.com
Sat Dec 29 09:39:33 MST 2012
I need it to work with the environment that the company already has in
existence. Everything they use is Apache 1 with mod_perl.
> Hi Kevin,
>
> Why recreate the wheel?
>
> CAS <%20https://wiki.jasig.org/display/CASUM>
>
> If you determine you really don't need CAS, perhaps this discussion of
> CAS <%20https://wiki.jasig.org/display/CASUM> implementation and
> SAML+1.1 ticket validation:
> https://wiki.jasig.org/display/CASUM/SAML+1.1 might help?
>
>
>
>
>
> On Fri, Dec 28, 2012 at 2:48 PM, Kevin Brown <kevinbrownbdc at gmail.com
> <mailto:kevinbrownbdc at gmail.com>> wrote:
>
> So, new job... I've been tasked with implementing SSO using SAML
> 1.1. The client provided a document that gives an example of the
> Response object that will be forwarded into our site when a user
> goes to login. I'm trying to figure out how to validate the XML
> that I'm given so that I don't blindly trust that the document
> hasn't been modified in some way or just faked.
> I have the keys (DigestValue and SignatureValue), but when I try
> to do a sha1 of the xml (minus all the parts in the
> <Signature></Signature> section, the hash doesn't match.
> Does anyone have any experience with this that they might be able
> to point me in the right direction?
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> <mailto:PLUG-discuss at lists.phxlinux.org>
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>
>
>
>
> --
>
> (503) 754-4452 Android
> (623) 239-3392 Skype
> (623) 688-3392 Google Voice
> **
> it-clowns.com <http://it-clowns.com>
> Chief Clown
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
More information about the PLUG-discuss
mailing list