imi message

Subject: [OASIS Issue Tracker] Created: (IMI-38) Clarification onWS-Security constants to be used with SAML tokens

From: OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>
To: imi@lists.oasis-open.org
Date: Thu, 15 Apr 2010 11:42:15 -0400 (EDT)

Clarification on WS-Security constants to be used with SAML tokens
------------------------------------------------------------------

                 Key: IMI-38
                 URL: http://tools.oasis-open.org/issues/browse/IMI-38
             Project: OASIS Identity Metasystem Interoperability (IMI) TC
          Issue Type: Bug
          Components: Spec
    Affects Versions: SAML 1.1 Profile PR, SAML 2.0 Profile PR
            Reporter: Scott Cantor
            Priority: Minor


http://lists.oasis-open.org/archives/imi-comment/201004/msg00001.html

RSTRs typically contain something like this to reference the issued security token:

    <RequestedAttachedReference>
        <SecurityTokenReference xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";>
            <KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID";>urn:uuid:992eea3f-08fa-44fb-8b84-8245b122dafc</KeyIdentifier>
        </SecurityTokenReference>
    </RequestedAttachedReference>
    <RequestedUnattachedReference>
        <SecurityTokenReference xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";>
            <KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLAssertionID";>urn:uuid:992eea3f-08fa-44fb-8b84-8245b122dafc</KeyIdentifier>
        </SecurityTokenReference>
    </RequestedUnattachedReference>

What ValueType should STS implementers use when adopting the recent SAML1.1 and SAML2.0 token profiles? Is this ValueType the same as the wst:TokenType in the RST?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira