tags:

views:

624

answers:

1
+1  Q: 

Anyone using Spring-ws with SAML authentication?

We are considering spring-ws as the platform for implementing web services that will be deployed on weblogic. We need to use WS-Security with SAML tokens issued by our identity management platform (TFIM).

The Spring-ws documentation for XwsSecurityInterceptor does not mention SAML, and it is not clear to me if would work in this context.

I guess alternatives could be to do our own interceptor which uses OpenSAML or somehow utilises the SAML support in weblogic.

Does anyone have experience with this? Would be nice to aim for a solution that is known to be workable.

A: 

Apache WSS4J does support SAML tokens, and Spring-WS comes with a Wss4jSecurityInterceptor, so I'd guess you could get it working out of the box.

skaffman  2009-06-20 08:31:31

related questions

Spring + SOAPExceptionImpl: Error during saving a multipart message
WebServicice with Apache CXF and custom headers.
How to define XSD for spring-ws contract to return a serialized image?
Spring WS and PayloadRootAnnotationMethodEndpointMapping
SOAP and Spring
@Secured service methods and spring ws
How to add custom SOAP-Header element to the generated WSDL in Spring-WS
Spring-WS generates WSDL without operations
Spring WS-Security visible in WSDL
Consuming Third Party web services through Spring WebServiceTemplate
Syntax of SoapAction in spring-ws config
Usage of SoapActionEndpointMapping in Spring-ws
@Secured() is there any statement show on log...?
Spring web service client for calling Apache axis web service
How to handle rpc/literal webservice with JAXB2 and Spring-WS
How do I create a mock object for Spring's WebServiceTemplate?
How can I handle Castor unmarshaling of SOAP messages when the namespace is defined inside the operation tag?
Hibernate session handling in spring web services
Spring-ws or Axis2 or Something else for "Contract-First" approach to WS
Spring-WS: how to use WebserviceTemplate with pre-generated SOAP-envelope
Which framework is better CXF or Spring-WS?
Spring-WS: How to access MessageContext from PayloadEndpoint
WebServiceTransportException: Unauthorized [401] in Spring-WS
How do you use WebServiceMessageDrivenBean in Spring-WS?