File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Security and the fly likes Suggest an open source SAML token generator Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "Suggest an open source SAML token generator" Watch "Suggest an open source SAML token generator" New topic

Suggest an open source SAML token generator

Nitesh Kant

Joined: Feb 25, 2007
Posts: 1638

Hi All,

Can someone suggest an easily available and readily installable SAML token generator. I dont want something as sophisticated as shibboleth, i just want a piece of code that can generate SAML authentication, authorization and attribute tokens.
I am developing an intermediary that understands SAML tokens, no matter what the source is.

Thanks in advance,

apigee, a better way to API!
Ulf Dittmer

Joined: Mar 22, 2005
Posts: 41155
Welcome to JavaRanch.

WSS4J contains a SAML implementation. It also contains other stuff, but you can ignore that.

Ping & DNS - my free Android networking tools app
Nitesh Kant

Joined: Feb 25, 2007
Posts: 1638

Hi Ulf,
Thanks alot for the prompt reply. WSS4J uses openSaml for creating SAML tokens. Actually, i wanted something like an openLdap thingie, wherein i can use a utility to create SAML requests and it can give me back the SAML assertions. (This would mean that the implementation will be a service provider for authentication and authorization.) WSS4j is more of an API, correct me if i am wrong.
I will tell you in detail as to what i need:
I am writing an intermediary that will take request from a third-party (they will be SAML authentication/attribute/authorization assertions). Based on the type of assertions, i may choose to:
1) Post a request to a SAML authorization server(if i received an authentication assertion)
2) Just propogate the authentication info in some other format to my client.
3) Fetch some attributes from a configured server and send it to the client.

So, i need an environment where based on the SAML request i make, i can get SAML assertions.

I agree. Here's the link:
subject: Suggest an open source SAML token generator
Similar Threads
Java Code Parser
Create SAML token, verify token and get user id from token
Open SAML -newie question
Need Info on SAML
retrieve the particular element -- StringTokenizer