SAML in Web Service

Thread view:

Ted W - 10 Aug 2006 17:40 GMT

Hello,

Can anyone clearify what is actually OASIS?

I would also get to know how to implement SAML security
into web service in Java platform. Does anyone know any sample
projects where to start? Are there any standard libraries and interfaces
to be used?

Cheers!

Reply to this Message

Oliver Wong - 10 Aug 2006 21:19 GMT

> Hello,
>
> Can anyone clearify what is actually OASIS?

When I google for "oasis" I get http://www.oasis-open.org/

> I would also get to know how to implement SAML security
> into web service in Java platform. Does anyone know any sample
> projects where to start?

When I google for "saml java sample" I get
http://java.sun.com/webservices/docs/1.6/tutorial/doc/XWS-SecuritySamples7.html

> Are there any standard libraries and interfaces
> to be used?

When I google for "saml java library" I get
http://www.extreme.indiana.edu/apis/xsul/xsul/dsig/saml/authorization/Capability
Authorizer.html

- Oliver

Reply to this Message

Ted W - 10 Aug 2006 21:56 GMT

>> Can anyone clearify what is actually OASIS?
>
> When I google for "oasis" I get http://www.oasis-open.org/

Yes, but is this just a organization making standards no products?
Seems to be so.

> When I google for "saml java sample" I get
> http://java.sun.com/webservices/docs/1.6/tutorial/doc/XWS-SecuritySamples7.html

It's simple OASIS 1.0 based sample. How about libries it uses, are they just
Sun's WS reference libs.

> When I google for "saml java library" I get
> http://www.extreme.indiana.edu/apis/xsul/xsul/dsig/saml/authorization/Capability
Authorizer.html

Just a link to javadocs... no product available.

Reply to this Message

Oliver Wong - 10 Aug 2006 22:18 GMT

>>> Can anyone clearify what is actually OASIS?
>>
>> When I google for "oasis" I get http://www.oasis-open.org/
> Yes, but is this just a organization making standards no products?
> Seems to be so.

That's my understanding.

>> When I google for "saml java sample" I get
>> http://java.sun.com/webservices/docs/1.6/tutorial/doc/XWS-SecuritySamples7.html
>
> It's simple OASIS 1.0 based sample. How about libries it uses, are they
> just Sun's WS reference libs.

When/if you got the samples, did they come with source code? Perhaps you
should look in their to see what libraries they use.

>> When I google for "saml java library" I get
>> http://www.extreme.indiana.edu/apis/xsul/xsul/dsig/saml/authorization/Capability
Authorizer.html
>
> Just a link to javadocs... no product available.

Try googling for the package names, or asking the authors where you can
download the JARs.

- Oliver

Reply to this Message

Tomek - 11 Aug 2006 10:27 GMT

> I would also get to know how to implement SAML security
> into web service in Java platform. Does anyone know any sample
> projects where to start? Are there any standard libraries and interfaces
> to be used?

As i remeber WSS4j implements SAML assertion.
XFire and Axis uses WSS4J for ws-security, so if you use any of these
lib, it should be easy to use SAML.

Reply to this Message

SAML in Web Service

Free Magazines