Does the SSO Extension support EncryptedAssertion?

JavaScript is disabled. Strange things can happen.

Unanswered

← Does the SSO Extension support EncryptedAssertion?

The way I did it was since the extension already uses lxml and xmlsec in the saml_response.py, I just used lxml to make the EncryptedAssertion node, I used xmlsec to encrypt the Assertion node into an EncryptedData node and then lxml to move the EncryptedData node into the EncryptedAssertion node.

A note though that the vendor I was working with only needed the Assertion node encrypted.

		
				1
				
Posted 
	5 years ago

					⠿More
				  		
			 Report
		
					Justin Miller
				
					43
 × 2

Thanks to Justin Miller's response, I was able to extend the SAML extension to sign and encrypt the assertion using the lxml and xmlsec libraries. It would be nice to have these options available directly from the SDK. It does not take a lot of code but you do have to understand exactly what is required by the Service Provider.

— Charlie Lambeth 4 years ago

20 Views

0 Answers

5 years ago

4 years ago