SAML in Web Service

[Ted W]

Hello,

Can anyone clearify what is actually OASIS?

I would also get to know how to implement SAML security
into web service in Java platform. Does anyone know any sample
projects where to start? Are there any standard libraries and interfaces
to be used?

Cheers!

 

[Oliver Wong]

Hello,

Can anyone clearify what is actually OASIS?

When I google for "oasis" I get http://www.oasis-open.org/

I would also get to know how to implement SAML security
into web service in Java platform. Does anyone know any sample
projects where to start?

When I google for "saml java sample" I get
http://java.sun.com/webservices/docs/1.6/tutorial/doc/XWS-SecuritySamples7.html

Are there any standard libraries and interfaces
to be used?

When I google for "saml java library" I get
http://www.extreme.indiana.edu/apis/xsul/xsul/dsig/saml/authorization/CapabilityAuthorizer.html

- Oliver

 

[Ted W]

When I google for "oasis" I get http://www.oasis-open.org/

Yes, but is this just a organization making standards no products?
Seems to be so.

When I google for "saml java sample" I get
http://java.sun.com/webservices/docs/1.6/tutorial/doc/XWS-SecuritySamples7.html

It's simple OASIS 1.0 based sample. How about libries it uses, are they just
Sun's WS reference libs.

When I google for "saml java library" I get
http://www.extreme.indiana.edu/apis/xsul/xsul/dsig/saml/authorization/CapabilityAuthorizer.html

Just a link to javadocs... no product available.

 

[Oliver Wong]

Yes, but is this just a organization making standards no products?
Seems to be so.

That's my understanding.

It's simple OASIS 1.0 based sample. How about libries it uses, are they
just Sun's WS reference libs.

When/if you got the samples, did they come with source code? Perhaps you
should look in their to see what libraries they use.

Just a link to javadocs... no product available.

Try googling for the package names, or asking the authors where you can
download the JARs.

- Oliver

 

[Tomek]

I would also get to know how to implement SAML security
into web service in Java platform. Does anyone know any sample
projects where to start? Are there any standard libraries and interfaces
to be used?

As i remeber WSS4j implements SAML assertion.
XFire and Axis uses WSS4J for ws-security, so if you use any of these
lib, it should be easy to use SAML.