[FEDIZ-70] Missing support for Web Services Policy 1.2 (http://schemas.xmlsoap.org/ws/2004/09/policy)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.1.0
• Fix Version/s: 1.1.1, 1.2.0
• Component/s: IDP
• Labels: http://schemas.xmlsoap.org/ws/2004/09/policy http://www.w3.org/ns/ws-policy

Environment

Tomcat 7.0.47, JRE 1.7
SharePoint 2010 as SP

• Assignee: Oliver Wulff
• Reporter: Stepan Hrbacek
• Created: 07/Feb/14 12:55
• Updated: 31/Jul/14 08:22
• Resolved: 20/Feb/14 20:53

Description

I am trying to setup Claims authentication to SharePoint 2010 via Apache CXF Fediz IDP and I have SharePoint rejects claims created by Fediz because it does not support Web Services Policy 1.5 (http://www.w3.org/ns/ws-policy) that is by default used in Fediz - following error is reported (see mailing list Claims authentication to SharePoint 2010 via Apache CXF Fediz IDP):
--------------------------
02/06/2014 11:18:00.40 w3wp.exe (0x1268) 0x0BD4 SharePoint Foundation
General 8nca Verbose Application error when access /_trust/,
Error=ID3007: The element 'AppliesTo' with namespace 'http://www.w3.org/ns/ws-policy' is unrecognized.
at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustSerializationHelper.ReadRSTRXml(XmlReader
reader, RequestSecurityTokenResponse rstr, WSTrustSerializationContext context, WSTrustConstantsAdapter
trustConstants) at Microsoft.IdentityModel.Protocols.WSTrust.WSTrustSerializationHelper.CreateResponse(XmlReader
reader, WSTrustSerializationContext context, WSTrustResponseSerializer responseSerializer,
WSTrustConstantsAdapter trustConstants) at Microsoft.IdentityModel.Protocols.WSTrust.WSTrust13ResponseSerializer.ReadXml(XmlReader
reader, WSTrustSerializationContext context) at Microsoft.IdentityModel.Protocols.WSFederation.WSFederationSer...
94b07bcc-8709-4449-8c8f-c4e175e2949b
--------------------------

Would it be please possible to extend the org.apache.cxf.fediz.service.idp.beans.STSClientAction so that the WSP and Addressing namespaces are configurable in idp-servlet.xml?