Project: talendesb
Issue TESB-475: STS: Issue standard SAMLToken - SAML 2.0
As extention/alternative to TESB-281 we also like to issue SAML 2.0 Token on request to demo the new feature in CXF based on the updated WSS4J 1.6 version. Implement the Issue operation of the STS Framework service to support the following Inbound/Outbound Tokens: Inbound: UsernameToken, X.509 Token Outbound: SAML 2.0 w/ Holder-of-Key and Bearer subject confirmation methods To verify the incoming UsernameToken it would be ok to use a local file e.g. tomcat_users.xml and for the validation of the X509 Certificate it would be ok to use a local keystore. (.jks) which can be configured (location, user /pwd to access the store) Target Runtime Environment: Tomcat 6 Optional: OSGi Container Purpose: It is intended to be an Apache CXF Example implementation to demonstrate how the STS Frameweok service could be used and also to demonstrate the new SAML2.0 suppport on CXF based on the new WSS4J 1.6 Lib.
Story points: 1