Help with SAML Sender vouches with a JAXWS Web Service and IBM Websphere please

Marcelo Tataje

Ranch Hand

Posts: 64

I like...

posted 9 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hello, I'm facing a problem with a JAXWS contract first WebService I want to deploy using SAML Assertions in its SOAP Message.
I'm using RAD 8.0 and Websphere 7.0 as server.

My WSDL contains the policies for tokens, these are my policies:

<wsp:Policy wsu:Id="ResourceBindingPolicy">
    <wsp:ExactlyOne>
      <wsp:All>
        <wsam:Addressing wsp:Optional="false"/>
        <sp:AsymmetricBinding>
          <wsp:Policy>
            <sp:InitiatorToken>
              <wsp:Policy>
                
                <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
                  <wsp:Policy>
                    <sp:WssX509V3Token10/>
                    <sp:RequireIssuerSerialReference/>
                  </wsp:Policy>
                </sp:X509Token>
              </wsp:Policy>
            </sp:InitiatorToken>
            <sp:RecipientToken>
              <wsp:Policy>
                
                <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToInitiator">
                  <wsp:Policy>
                    <sp:WssX509V3Token10/>
                    <sp:RequireKeyIdentifierReference/>
                  </wsp:Policy>
                </sp:X509Token>
              </wsp:Policy>
            </sp:RecipientToken>
            <sp:Layout>
              <wsp:Policy>
                <sp:Strict/>
              </wsp:Policy>
            </sp:Layout>
            <sp:IncludeTimestamp/>
            <sp:OnlySignEntireHeadersAndBody/>
            <sp:AlgorithmSuite>
              <wsp:Policy>
                <sp:Basic128/>
              </wsp:Policy>
            </sp:AlgorithmSuite>
          </wsp:Policy>
        </sp:AsymmetricBinding>
        <sp:Wss10>
          <wsp:Policy>
            <sp:MustSupportRefKeyIdentifier/>
          </wsp:Policy>
        </sp:Wss10>
        <sp:SignedSupportingTokens>
          <sp:RequestSecurityTokenTemplate>
            <trust:TokenType xmlns:trust="http://docs.oasis-open.org/ws-sx/ws-trust/200512">http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0</trust:TokenType>
          </sp:RequestSecurityTokenTemplate>
          <wsp:Policy>
            
            <sp:SamlToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
              <wsp:Policy>
                <sp:WssSamlV20Token11/>
              </wsp:Policy>
            </sp:SamlToken>
          </wsp:Policy>
        </sp:SignedSupportingTokens>

My Web Services Client generates a wsit-client.xml which references to an xml file similar to the WSDL but in the tag you can find that you can add a SamlCallback class to consume the token, add signature and add the assertion to the SOAP.

The application must use just JAXWS and other libraries, but Metro is prohibited. I'm just missing the SAML to complete my application. Somebody could help me please? I'd be really grateful. Thanks in advance

You showed up just in time for the waffles! And this tiny ad:

Building a Better World in your Backyard by Paul Wheaton and Shawn Klassen-Koop

https://coderanch.com/wiki/718759/books/Building-World-Backyard-Paul-Wheaton