Title: Urgent: SAML NS declaration in SOAP-ENV or self contained?
We ran
into this problem too and we fixed our code to support both.
-
Ritu
-----Original Message-----
From: Mingde Xu
[mailto:]
Sent: Thursday, July 11, 2002 10:34
AM
To: ''
Subject: [saml-dev]
Urgent: SAML NS declaration in SOAP-ENV or self
contained?
We ran into one problem during internet testing
using the samlp and saml namespace (NS) declaration in the SAML request and
response, can someone clarify it because it may cause problem at
Interop. The SAML processing routines would have problems in
understanding the (2) kind of NS declaration.
There are two ways of declaring the NS:
1. declaration at the SAML level - NS is
self-contained within SAML
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" >
<SOAP-ENV:Header>
...</SOAP-ENV:Header>
<SOAP-ENV:Body>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"
xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" ResponseID="id" ...>
.....
</samlp:Response>
</SOAP-ENV:Body>
...
</SOAP-ENV>
2. declaration at the SOAP level
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"
xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<SOAP-ENV:Header>
...</SOAP-ENV:Header>
<SOAP-ENV:Body>
<samlp:Response ResponseID="id" ...> .....
</samlp:Response>
</SOAP-ENV:Body>
...
</SOAP-ENV>
With (1), SOAP carrier can just pass the
samlp:Response to the SAML processing module.
With (2), SAML processing module has to process the whole SOAP
message.
Which way (or both) should one support?
