[WSS-240] Support KeyValue in SAML subject

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.9, 1.6
• Fix Version/s: 1.5.9, 1.6
• Component/s: WSS4J Core
• Assignee: Colm O hEigeartaigh
• Reporter: David Valeri
• Created: 04/Aug/10 16:43
• Updated: 18/Sep/10 14:08
• Resolved: 18/Sep/10 14:06

Description

Numerous places within WSS4J assume that the KeyInfo within the SAML authentication statement will contain only a ds:X509Data element with the complete certificate contents. In many cases, the assertion only contains the key value without the additional X509 information. WSS4J should support sending and receiving signed messages using a SAML assertion with only KeyValue data.