[CXF-5503] SAML 2.0 SenderVouches / IssuedToken policy bug

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.8
• Fix Version/s: 2.7.9
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 20/Jan/14 14:56
• Updated: 11/Jul/14 12:51
• Resolved: 20/Jan/14 15:30

Description

When an STS issues a SenderVouches SAML 2.0 Assertion, a CXF client does not correctly sign the Assertion via a SecuritTokenReference transform in the service request.