Help with SAML Sender vouches with a JAXWS Web Service and IBM Websphere please

Marcelo Tataje

Ranch Hand

Posts: 64

I like...

posted 11 years ago

Number of slices to send:

Optional 'thank-you' note:

Send

Hello, I'm facing a problem with a JAXWS contract first WebService I want to deploy using SAML Assertions in its SOAP Message.
I'm using RAD 8.0 and Websphere 7.0 as server.

My WSDL contains the policies for tokens, these are my policies:

<wsp:Policy wsu:Id="ResourceBindingPolicy">
    <wsp:ExactlyOne>
      <wsp:All>
        <wsam:Addressing wsp:Optional="false"/>
        <sp:AsymmetricBinding>
          <wsp:Policy>
            <sp:InitiatorToken>
              <wsp:Policy>
                
                <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
                  <wsp:Policy>
                    <sp:WssX509V3Token10/>
                    <sp:RequireIssuerSerialReference/>
                  </wsp:Policy>
                </sp:X509Token>
              </wsp:Policy>
            </sp:InitiatorToken>
            <sp:RecipientToken>
              <wsp:Policy>
                
                <sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToInitiator">
                  <wsp:Policy>
                    <sp:WssX509V3Token10/>
                    <sp:RequireKeyIdentifierReference/>
                  </wsp:Policy>
                </sp:X509Token>
              </wsp:Policy>
            </sp:RecipientToken>
            <sp:Layout>
              <wsp:Policy>
                <sp:Strict/>
              </wsp:Policy>
            </sp:Layout>
            <sp:IncludeTimestamp/>
            <sp:OnlySignEntireHeadersAndBody/>
            <sp:AlgorithmSuite>
              <wsp:Policy>
                <sp:Basic128/>
              </wsp:Policy>
            </sp:AlgorithmSuite>
          </wsp:Policy>
        </sp:AsymmetricBinding>
        <sp:Wss10>
          <wsp:Policy>
            <sp:MustSupportRefKeyIdentifier/>
          </wsp:Policy>
        </sp:Wss10>
        <sp:SignedSupportingTokens>
          <sp:RequestSecurityTokenTemplate>
            <trust:TokenType xmlns:trust="http://docs.oasis-open.org/ws-sx/ws-trust/200512">http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0</trust:TokenType>
          </sp:RequestSecurityTokenTemplate>
          <wsp:Policy>
            
            <sp:SamlToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/AlwaysToRecipient">
              <wsp:Policy>
                <sp:WssSamlV20Token11/>
              </wsp:Policy>
            </sp:SamlToken>
          </wsp:Policy>
        </sp:SignedSupportingTokens>

My Web Services Client generates a wsit-client.xml which references to an xml file similar to the WSDL but in the tag you can find that you can add a SamlCallback class to consume the token, add signature and add the assertion to the SOAP.

The application must use just JAXWS and other libraries, but Metro is prohibited. I'm just missing the SAML to complete my application. Somebody could help me please? I'd be really grateful. Thanks in advance

With a little knowledge, a cast iron skillet is non-stick and lasts a lifetime.