[RAMPART-285] Interoporability issues in SAML 2.0 implementation

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.1
• Component/s: rampart-trust
• Assignee: Selvaratnam Uthaiyashankar
• Reporter: Thilina Mahesh Buddhika
• Created: 18/Feb/10 08:43
• Updated: 21/Dec/10 10:39
• Resolved: 21/Dec/10 10:31

Description

In the current SAML 2.0 implementation, there are two places which cause some interoperability issues with other implementations.

1. It should use generic SubjectConfirmationElement when processing the assertion.
2. Attributes "NotBefore" and "NotOnOrAfter" should be set in a Conditions element. Currently it is set in the SubjectConfirmationData element, which defines validity period only for the Subject element, not the entire assertion.