CODEWITHSUNDEEP
wso2saml-2.0ws-securitywss4jwso2-identity-server
Chakradhar K
Chakradhar K

Reputation: 509

Spring WS Security WSS4J with SAML from WSO2

Earlier I was in assumption that, WSS4J is not compatible with SAML, but as I see this http://jaminhitchcock.blogspot.in/2014/05/creating-and-validating-saml-assertions.html , I hope to give a try. But I want to use a Identity Provider(WSO2) to generate SAML token. So I should be able to configure WSS4J with a SecurityPolicy.xml file which verifies the token from Identity Provider. Please let me know where can I start looking for it?

Thanks

Upvotes: 1

Views: 1376

Answers (1)

Asela
Asela

Reputation: 5821

There are two ways that you can generates SAML tokens with Identity Server.

  1. Use Identity Server as SAML2 SSO IDP that implements SAML2 SSO web browser based profile.

  2. Use Identity Server as STS (Security Token Server) with WS-Trust specification.

I think, It is more likely that you are hoping to use Identity Server as STS. With STS, Identity Serve provides a web service to retrieve SAML tokens. This STS web service can be secured with WS-Security mechanism by default. As an example, you can secure STS service with user name token. Then client needs to send the RST request with user name token. Once user it authenticated, client would be received a SAML token. I think, you can find some information about STS service from here

Upvotes: 1

Related Questions