Hi Klaus It seems that you send a SAML token (<Assertion>) from the service consumer to the provider. You can also get some information from here: http://coheigea.blogspot.com/2011/06/ws-securitypolicysaml-sample-in-talend.html http://coheigea.blogspot.com/2011/09/saml-securitypolicy-enforcement-in-cxf.html
>>> In partcular, how to I insert that XML assertion in the SOAP envelop header using CFX? >>> This is fairly simple. You don't have to do it. Based on the WS-SecurityPolicy information, CXF will get the SAML token from the STS and add it to the outgoing request. >>> My application is supposed to connect back to the STS server to validate the assertion presented by the user. >>> Usually, the service provider can validate a SAML token on its own but it's also possible to let validate a SAML token by the STS as described here (see STSTokenValidator): http://coheigea.blogspot.com/2011/06/custom-token-validation-in-apache-cxf.html HTH ------ Oliver Wulff http://owulff.blogspot.com Solution Architect Talend Application Integration Division http://www.talend.com ________________________________________ Von: Klaus Teller [[email protected]] Gesendet: Montag, 6. Februar 2012 00:49 Bis: [email protected] Betreff: Help talking to an STS server Hi, I'm new to CFX, STS, and WS-Trust. Please bear with me. I'm writing a piece of a sofware where some authentication via an STS server is involved. The user connects to the STS server and gets an XML document with root element <Assertion>. Then the user connects to my application and passes this XML document. My application is supposed to connect back to the STS server to validate the assertion presented by the user. I'm attaching a sample XML of how the SOAP message sent from my application to the STS has to look like. The general question is, how can I use CFX to accomplish this? are some sample code available somewhere? In partcular, how to I insert that XML assertion in the SOAP envelop header using CFX? Thanks, Klaus. -- Empfehlen Sie GMX DSL Ihren Freunden und Bekannten und wir belohnen Sie mit bis zu 50,- Euro! https://freundschaftswerbung.gmx.de
