SAML | SAMLSecurity

New book release: OpenSAML version 3

Jun 23, 2016 · 1 min read · SAML OpenSAMLV3 ·

As many of you know, version 2 of OpenSAML will officially reach its end of life at July 31 of 2016. This means that the library will not be receiving any new updates, not even critical security updates. Because of this, everyone currently using version 2 of OpenSAML is strongly advised to migrate to OpenSAML version …

OpenSAML V3 Javadocs

Apr 25, 2016 · 1 min read · SAML OpenSAMLV3 ·

Share on:

One notable thing that changed going from version 2 to 3 of OpenSAML is that the library was split in to. This first post on OpenSAML V3 try to help by linking to the javadoc of all different libraries

SAML Chrome Extension Published!

Oct 28, 2015 · 1 min read · SAML ·

Share on:

I have been working with SAML for a while now and I have always used Firefox for debugging instead of my favorite browser, Chrome. Why? you ask. Because there is a plugin called SAML tracer on firefox that is excellent for viewing the SAML messages going across the browser. There have been no such plugin for Chrome. …

Adding KeyInfo to a message in OpenSAML

Jul 15, 2015 · 2 min read · SAML OpenSAMLV2 ·

Share on:

Information and example on how to sign and send authnrequests in OpenSAML

What is a SAML Assertion?

Jul 2, 2015 · 3 min read · SAML ·

Share on:

If you are just starting out trying to understand SAML you will come across the term SAML Assertion quite quickly. In this post or tutorial, I will try to explain to you what a SAML Assertion is and give you some examples on how they could look. This post mainly looks at the SAML Assertion in the perspective of the …

OpenSAML book release!

Sep 9, 2014 · 2 min read · SAML OpenSAMLV2 ·

Share on:

After many late nights and tedious editing, I have finished my book on OpenSAML, based on my experiences working with the OpenSAML library. A Guide to OpenSAML is a short book that introduces SAML, the SAML Web Browser Profile and the use of OpenSAML. Buy the book on Payhip! The book has three parts, the first of which …

Exception: Apache xmlsec IdResolver could not resolve the Element for id reference while decrypting

May 14, 2014 · 1 min read · SAML OpenSAMLV2 ·

Share on:

Why am I getting a exception saying Exception: Apache xmlsec IdResolver could not resolve the Element for id reference while decrypting

Nullpointer exception in OpenSAML

May 5, 2014 · 1 min read · SAML OpenSAMLV2 ·

Share on:

This is a common exception to beginners in using OpenSAML. A common mistake when starting to use the OpenSAML library is to not initialise the library.

Signing with OpenSAML

Nov 12, 2012 · 2 min read · SAML OpenSAMLV2 ·

Share on:

When exchanging information with SAML it is highly recommended to sign and verify signatures on all messages. This to ensure the the sender really is how he says he is and that the information sent has not been manipulated during transport. Every SAML object that implements the SignableXMLObject interface can be …