Sunday, April 27, 2008

Why choose SAML v2.0 over SAML v1.1?

If the answer is not very obvious, please follow the following document that highlights the differences between SAML v1.1 and SAML v2.0. The document is called Differences Between SAML V2.0 and SAML V1.1

In a nutshell,
a) SAML v2.0 is a major update to the specification. It includes considerable contributions from the Liberty Alliance ID-FF donations.
b) XML Encryption is supported only in SAML v2.0
c) The following protocols are added or revamped in SAML2.
* Assertion Query and Request Protocol
* Authentication Request Protocol
* Artifact Resolution Protocol
* Name Identifier Management Protocol
* Single Logout Protocol
* Name Identifier Mapping Protocol

Oasis XACML Interoperability Event at RSA Conference 2008

Here is the slide deck from Axiomatics that describes the intricacies of the XACML Interoperability Event from a technical stand point.

http://www.axiomatics.com/media/xacml_interop.pdf

My summary review is http://anil-identity.blogspot.com/2008/04/summary-review-oasis-xacml.html


==============================

OpenSAML v2 TroubleShooting Tip 1

If you see the following error:


2008-01-08 15:41:53,809 ERROR [org.opensaml.xml.XMLConfigurator] Configuration file does not validate against schema

org.xml.sax.SAXParseException: UndeclaredPrefix: Cannot resolve 'xt:DEFAULT' as a QName: the prefix 'xt' is not declare
at com.sun.org.apache.xerces.internal.jaxp.validation.Util.toSAXParseException(Util.java:109)
at com.sun.org.apache.xerces.internal.jaxp.validation.ErrorHandlerAdaptor.error(ErrorHandlerAdaptor.java:104)
at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:382)
at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:316)
at com.sun.org.apache.xerces.internal.impl.xs.XMLSchemaValidator$XSIErrorReporter.reportError(XMLSchemaValidator.java:429)
at com.sun.org.apache.xerces.internal.impl.xs.XMLSchemaValidator.reportSchemaError(XMLSchemaValidator.java:3185)
at com.sun.org.apache.xerces.internal.impl.xs.XMLSchemaValidator.processOneAttribute(XMLSchemaValidator.java:2799)
at com.sun.org.apache.xerces.internal.impl.xs.XMLSchemaValidator.processAttributes(XMLSchemaValidator.java:2735)
at com.sun.org.apache.xerces.internal.impl.xs.XMLSchemaValidator.handleStartElement(XMLSchemaValidator.java:2094)
at com.sun.org.apache.xerces.internal.impl.xs.XMLSchemaValidator.startElement(XMLSchemaValidator.java:705)
at com.sun.org.apache.xerces.internal.jaxp.validation.ValidatorHandlerImpl.startElement(ValidatorHandlerImpl.java:335)
at com.sun.org.apache.xml.internal.serializer.ToXMLSAXHandler.closeStartTag(ToXMLSAXHandler.java:205)
at com.sun.org.apache.xml.internal.serializer.ToSAXHandler.flushPending(ToSAXHandler.java:291)
at com.sun.org.apache.xml.internal.serializer.ToXMLSAXHandler.startElement(ToXMLSAXHandler.java:646)
at com.sun.org.apache.xml.internal.serializer.ToXMLSAXHandler.startElement(ToXMLSAXHandler.java:501)
at com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse(DOM2TO.java:138)
at com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse(DOM2TO.java:215)


This error is due to not endorsing XALAN.

Reference: https://spaces.internet2.edu/display/OpenSAML/OSTwoUsrManJavaInstall


==================================