RE: [saml-dev] Question Regarding Java API for SAML

SAML is to JXTA what payload is to protocol. Since most of 
what is SAML (not SAML-Protocol) is an expression of prior-events: 
i.e. user was authorized by/authenticated to an Authority using 
PKI at such a time and the Relying party can trust this by checking a 
signature or a user-name password. SAML assertions are a means to 
express secure transactions that have already occured. 

 

SAML-Protocol, at least in V2 is still very-much payload, 
but expresses ways to talk to a federate identity management system which may 
well be important in a JXTA context.

 

What comes to mind when reading the jxta.org website 
material is that JXTA expresses some thing that characterize TCP/UDP and 
encryption may be a ways and means to add more security, SAML has a number of 
ways to express 'encrypted element' which could add security to your 
conversation.

From: Harshad Bhagwat 
[mailto:] 
Sent: Friday, August 05, 2005 10:09 
PM
To: Mike Winter; Ashu; 
Cc: 

Subject: RE: [saml-dev] Question 
Regarding Java API for SAML

Is 
there any way to make interaction between SAML and JXTA ?

I am 
thinking to use SAML for Authentication and JXTA for Authorization + Trust 
Relationship ...

Or is 
there any other open source architecture for my requirement 
?

thnx 
in advance :)

  
-----Original Message-----
From: Mike Winter 
  [mailto:]
Sent: Saturday, August 06, 2005 2:52 
  AM
To: Ashu; 
Cc: 
  
Subject: RE: [saml-dev] Question 
  Regarding Java API for SAML

  
Consider use of JAXB to parse saml assertion schema into 
  'beans' that do xml validation. You can get this from Sun's jwsdp1.5+. The 
  examples are quite useful.

  

  
  From: Ashu [mailto:] 
  
Sent: Tuesday, August 02, 2005 3:11 PM
To: 
  
Cc: 
  
Subject: Re: [saml-dev] Question 
  Regarding Java API for SAML

  

  
Let me list my requirnent as follows

  
 

  
we have a website (www.abc.com) that 
  uses services of  (www.abc.com) but we 
  donot want

  
the user to be authenticated again on www.abc.com, that is why we are thinking of 
  using SAML as a possible solution.

  
Both Target and Destination are runing on weblogic 8.1 as of now,So can 
  you guys suugest

  
me on how to proceed forward with it, we tried OpenSAML but there is 
  hardly any documentation and Sample Code avavilable.

  
 

  
Plz. suggest on how to move forward on this.

  
 

  

Alistair Young <> 
  wrote:

  You 
    could have a look at SAMUEL (SAMl Used in ELearning) - a Java 
    SAML
toolkit from the UK JISC Guanxi 
    project:

http://sourceforge.net/projects/guanxi

It's not 
    complete yet - it's about to be updated with a SAML2 Metadata
object 
    binding hierarchy and some javadocs(!) but we use it to support 
    the
Shibboleth profile.

Alistair

-- 
Alistair 
    Young
Senior Software Engineer
UHI@Sabhal M犡 Ostaig
Isle of 
    Skye
Scotland

> Hello,
> How are you all doing today 
    ?
> Actually I am a newbie to your group and wanted to get started on 
    SAML.
>
> Few Questions related to SAML.
>
> 1) Do 
    we have any Java Toolkit for SAML, using which we can code our basic
> 
    browser redirection without login use case.
>
> I know there use 
    to be one from Netegrity (JSAML) but its not available
> anymore on 
    their website and there is this another Called as OpenSAML,
> which 
    one do you think is the best, Do you guys have any other Java
> 
    Toolkit to suggest.
>
> Cheers,
> Aashish
>
> 
    __________________________________________________
> Do You 
    Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection 
    around
> 
    http://mail.yahoo.com

---------------------------------------------------------------------
To 
    unsubscribe, e-mail: 
For 
    additional commands, e-mail: 
  

  
__________________________________________________
Do You 
  Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around 
  
http://mail.yahoo.com