Jiandong Guo

ActAs and Credential Delegation: update

Update the support for ws-trust 1.4 in Metro 2.0 for token delegation with ActAs to ensure interoperbility:

1. use ws-trust 1.4 namespace for ActAs: http://docs.oasis-open.org/ws-sx/ws-trust/200802
2. Create delegate SAML assertion with
   * id and usual attributes for the original user
   * actor attribute for the requestor:

   <saml:Attribute AttributeName="actor"

                 AttributeNamespace="http://schemas.xmlsoap.com/ws/2009/09/identity/claims">

                 <saml:AttributeValue>

                     <saml:Attribute AttributeName="name"                                          

                                    AttributeNamespace="http://schemas.xmlsoap.org/ws/2005/05/identity/claims"                              xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">

                                   <saml:AttributeValue>name</saml:AttributeValue>

                                </saml:Attribute>

                            </saml:AttributeValue>

                        </saml:Attribute>

Posted at 01:29PM Nov 12, 2009 by jiandongg in Sun  |  Comments[0]