Help with SAML Sender vouches with a JAXWS Web Service and IBM Websphere please

Marcelo Tataje

Ranch Hand

Posts: 64

I like...

posted 8 years ago

Hello, I'm facing a problem with a JAXWS contract first WebService I want to deploy using SAML Assertions in its SOAP Message.
I'm using RAD 8.0 and Websphere 7.0 as server.

My WSDL contains the policies for tokens, these are my policies:

<wsp:Policy wsu:Id="ResourceBindingPolicy">
    <wsp:ExactlyOne>
      <wsp:All>
        <wsam:Addressing wsp:Optional="false"/>
        <sp:AsymmetricBinding>
          <wsp:Policy>
            <sp:InitiatorToken>
              <wsp:Policy>
                
                <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
                  <wsp:Policy>
                    <sp:WssX509V3Token10/>
                    <sp:RequireIssuerSerialReference/>
                  </wsp:Policy>
                </sp:X509Token>
              </wsp:Policy>
            </sp:InitiatorToken>
            <sp:RecipientToken>
              <wsp:Policy>
                
                <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToInitiator">
                  <wsp:Policy>
                    <sp:WssX509V3Token10/>
                    <sp:RequireKeyIdentifierReference/>
                  </wsp:Policy>
                </sp:X509Token>
              </wsp:Policy>
            </sp:RecipientToken>
            <sp:Layout>
              <wsp:Policy>
                <sp:Strict/>
              </wsp:Policy>
            </sp:Layout>
            <sp:IncludeTimestamp/>
            <sp:OnlySignEntireHeadersAndBody/>
            <sp:AlgorithmSuite>
              <wsp:Policy>
                <sp:Basic128/>
              </wsp:Policy>
            </sp:AlgorithmSuite>
          </wsp:Policy>
        </sp:AsymmetricBinding>
        <sp:Wss10>
          <wsp:Policy>
            <sp:MustSupportRefKeyIdentifier/>
          </wsp:Policy>
        </sp:Wss10>
        <sp:SignedSupportingTokens>
          <sp:RequestSecurityTokenTemplate>
            <trust:TokenType xmlns:trust="http://docs.oasis-open.org/ws-sx/ws-trust/200512">http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0</trust:TokenType>
          </sp:RequestSecurityTokenTemplate>
          <wsp:Policy>
            
            <sp:SamlToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
              <wsp:Policy>
                <sp:WssSamlV20Token11/>
              </wsp:Policy>
            </sp:SamlToken>
          </wsp:Policy>
        </sp:SignedSupportingTokens>

My Web Services Client generates a wsit-client.xml which references to an xml file similar to the WSDL but in the tag you can find that you can add a SamlCallback class to consume the token, add signature and add the assertion to the SOAP.

The application must use just JAXWS and other libraries, but Metro is prohibited. I'm just missing the SAML to complete my application. Somebody could help me please? I'd be really grateful. Thanks in advance

Creativity is allowing yourself to make mistakes; art is knowing which ones to keep. Keep this tiny ad:

Devious Experiments for a Truly Passive Greenhouse!

https://www.kickstarter.com/projects/paulwheaton/greenhouse-1