[
https://issues.apache.org/jira/browse/SYNCOPE-1185?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16112561#comment-16112561
]
ASF subversion and git services commented on SYNCOPE-1185:
----------------------------------------------------------
Commit e624f369d6a2df12ddc516e6b50ff5cb9d30747b in syncope's branch
refs/heads/master from [~ilgrosso]
[ https://git-wip-us.apache.org/repos/asf?p=syncope.git;h=e624f36 ]
[SYNCOPE-1185] SAMLSSOResponseValidator in action
> Further validate SAML responses with CXF's SAMLSSOResponseValidator
> -------------------------------------------------------------------
>
> Key: SYNCOPE-1185
> URL: https://issues.apache.org/jira/browse/SYNCOPE-1185
> Project: Syncope
> Issue Type: Improvement
> Components: extensions
> Reporter: Francesco Chicchiriccò
> Assignee: Francesco Chicchiriccò
> Labels: saml
> Fix For: 2.0.5, 2.1.0
>
>
> At the moment, the SAML response is only validated via
> [SAMLProtocolResponseValidator|https://github.com/apache/cxf/blob/3.1.x-fixes/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLProtocolResponseValidator.java],
> but CXF also offers
> [SAMLSSOResponseValidator|https://github.com/apache/cxf/blob/3.1.x-fixes/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLSSOResponseValidator.java],
> providing further checks.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)