[CXF-4352] SAML Web SSO processing error when receiving a signed Assertion

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.1
• Fix Version/s: 2.6.2
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 31/May/12 13:39
• Updated: 28/Aug/12 17:44
• Resolved: 31/May/12 13:53

Description

When the RequestAssertionConsumerService (for SAML Web SSO) receives a signed SAML Assertion embedded in a SAMLP Response, there is a bug when it marshalls it to DOM, in that it tries to re-sign the Assertion.