XSPA Interop Tech Group

 View Only

  • 1.  STS truncating AttributeNamespace

    Posted 02-24-2010 03:35 
    The STS is returning truncated namespace for all attributes added as claims.

Namespace in addClaimType                                    Received
oasis:names:tc:xspa:1.0:subject-locality                
oasis:names:tc:xspa:1.0:subjec
oasis:names:tc:xspa:1.0:subject:functional_role     
oasis:names:tc:xspa:1.0:subjec
oasis:names:tc:xspa:1.0:resource:hl7:type             
oasis:names:tc:xspa:1.0:resource:hl
oasis:names:tc:xacml:2.0:subject:role                    
oasis:names:tc:xacml:2.0:subjec
oasis:names:tc:xspa:1.0:subject:purposeofuse       
oasis:names:tc:xspa:1.0:subjec
oasis:names:tc:xacml:1.0:action:action-id              
oasis:names:tc:xacml:1.0:actio
oasis:names:tc:xacml:2.0:subject:subject-id           
oasis:names:tc:xacml:2.0:subject
oasis:names:tc:xacml:2.0:resource:resource-id       
oasis:names:tc:xacml:2.0:resourc
oasis:names:tc:xspa:1.0:subject:hl7:permission        
oasis:names:tc:xspa:1.0:subject:hl
oasis:names:tc:xspa:1.0:subject:npi                         
oasis:names:tc:xspa:1.0:subjec


It looks like the attributeName values however are correct

Duane


  • 2.  Re: STS truncating AttributeNamespace

    Posted 02-24-2010 03:39 
    Sun's or IBM's?

---
craig forster | staff software engineer | ibm australia development labs
http://blogs.tap.ibm.com/weblogs/craigforster/


                                                                                                                             
  From:       Duane DeCouteau


  • 3.  Re: STS truncating AttributeNamespace

    Posted 02-24-2010 03:48 
    Suns STS

Craig Forster wrote:
> Sun's or IBM's?
>
> ---
> craig forster | staff software engineer | ibm australia development labs
> http://blogs.tap.ibm.com/weblogs/craigforster/
>
>
>                                                                                                                              
>   From:       Duane DeCouteau


  • 4.  Re: STS truncating AttributeNamespace

    Posted 02-24-2010 03:48 
    It was implemented in this way. I need to understand what is expected so 
that we can change it.
For example, If we have the uri (namespace) in the claimtype 
"oasis:names:tc:xspa:1.0:subject:functional_role",
what is the expected value for "AttributeName" and "AttributeNamespace" 
in the Saml assertion for it?
AttributeName="oasis:names:tc:xspa:1.0:subject:functional_role"?

Thanks!

Jiandong

Duane DeCouteau wrote:
> The STS is returning truncated namespace for all attributes added as 
> claims.
>
> Namespace in addClaimType                                    Received
> oasis:names:tc:xspa:1.0:subject-locality                
> oasis:names:tc:xspa:1.0:subjec
> oasis:names:tc:xspa:1.0:subject:functional_role     
> oasis:names:tc:xspa:1.0:subjec
> oasis:names:tc:xspa:1.0:resource:hl7:type             
> oasis:names:tc:xspa:1.0:resource:hl
> oasis:names:tc:xacml:2.0:subject:role                    
> oasis:names:tc:xacml:2.0:subjec
> oasis:names:tc:xspa:1.0:subject:purposeofuse       
> oasis:names:tc:xspa:1.0:subjec
> oasis:names:tc:xacml:1.0:action:action-id              
> oasis:names:tc:xacml:1.0:actio
> oasis:names:tc:xacml:2.0:subject:subject-id           
> oasis:names:tc:xacml:2.0:subject
> oasis:names:tc:xacml:2.0:resource:resource-id       
> oasis:names:tc:xacml:2.0:resourc
> oasis:names:tc:xspa:1.0:subject:hl7:permission        
> oasis:names:tc:xspa:1.0:subject:hl
> oasis:names:tc:xspa:1.0:subject:npi                         
> oasis:names:tc:xspa:1.0:subjec
>
>
> It looks like the attributeName values however are correct
>
> Duane
>


Related Content