hi friends,

I need to know how to specify the rules and roles of the user's in Active directory using the SAML

Hi,

I begin to use SAML and I have a little problem thinking about one xml needed attribute.

The attribute is something like "isSalaryMoreThanX"

-------------------------------- 

Query:

<samlp:AttributeQuery>
  <saml:Attribute Name=“isSalaryMoreThanX">
    <saml:AttributeValue>
      <isOver targetSalary="30000"/>
    </saml:AttributeValue>
  </saml:Attribute>
</samlp:AttributeQuery>

Read more

My question is very simple:  does SAML require the Signature node to precede the Assertion node?  If so, can you possibly point me to this requirement?

I am currently researching the security technological  roadmap for the enterprise and am currently researching the use of SAML for SSO, Cross platform Identity Propogation, Use of third party Identity Federation , Using SAML for authorization etc.

The environment we are  using is Java/J2EE.

Just wanted to open this topic to discuss what is working for you and the suggestions you have based on experience in implementing SAML.

Please do also send me the related links if you came accross one.

I am new to SAML.

We have a portal where users are authenticated. We have to pass users credentials using SAML to the ESB layer which inturn passes it to our backend systems like SAP, Siebel etc. 

These systems would authenticate the user based on their credentials and the SAML token and return the requested data back to the ESB which passes it onto the portal for presentation. 

Can anyone give me an idea on how to get started on this? 

Portal is Oracle Weblogic, ESB is Progress Sonic in our case.

Thanks