Question

我想通过ADFS集成令牌证书和SAML对象。由于KeyInfo格式，我可以解析[使用C＃]除认证值之外的所有项目。我认为＆＃34; KeyInfo＆＃34;缺少＆＃39; ds＆＃39;字首。我不知道我在哪里做错了。

＆＃13;

<samlp:Response ID=\"_00ca83c9-aad0-4210-9174-87ec874c5103\" Version=\"2.0\" xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\">

 <Issuer xmlns=\"urn:oasis:names:tc:SAML:2.0:assertion\">*******</Issuer><samlp:Status><samlp:StatusCode Value=\"urn:oasis:names:tc:SAML:2.0:status:Success\" /></samlp:Status>
 <Assertion ID=\"_bac09d77-c98e-48f6-bf62-8bbbbd1756d9\" IssueInstant=\"2015-08-19T23:07:32.659Z\" Version=\"2.0\" xmlns=\"urn:oasis:names:tc:SAML:2.0:assertion\"><Issuer>http://ADFS.*******.com.au/adfs/services/tru</Issuer>
 
 <ds:Signature xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\">
 <ds:SignedInfo></ds:SignedInfo>
 <ds:SignatureValue>some value</ds:SignatureValue>
 
 <KeyInfo xmlns=\"http://www.w3.org/2000/09/xmldsig#\"><ds:X509Data><ds:X509Certificate>some value</ds:X509Certificate></ds:X509Data></KeyInfo> 
 
 </ds:Signature>
 
 <Attribute Name=\"LastName\"><AttributeValue>FFFF</AttributeValue></Attribute>
 <Attribute Name=\"Username\"><AttributeValue>fdfdgf</AttributeValue></Attribute>
 <Attribute Name=\"VAL6\"><AttributeValue>AAAAA</AttributeValue></Attribute>
 <AuthnStatement AuthnInstant=\"2015-08-19T23:07:32.549Z\"><AuthnContext>
 <AuthnContextClassRef>urn:federation:authentication:windows</AuthnContextClassRef></AuthnContext></AuthnStatement>
 </Assertion>
 </samlp:Response>

＆＃13;

Answer 1

试试这个

<?xml version="1.0" encoding="utf-8" ?>
<samlp:Response ID="_00ca83c9-aad0-4210-9174-87ec874c5103" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
  <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">*******</Issuer>
  <samlp:Status>
    <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
  </samlp:Status>
  <Assertion ID="_bac09d77-c98e-48f6-bf62-8bbbbd1756d9" IssueInstant="2015-08-19T23:07:32.659Z" Version="2.0" xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
    <Issuer>http://ADFS.*******.com.au/adfs/services/tru</Issuer>
    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
        <ds:Reference URI="http://www.w3.org/TR/2000/REC-xhtml1-20000126/">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
          <ds:DigestValue>j6lwx3rvEPO0vKtMup4NbeVu8nk=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue></ds:SignatureValue>
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIICXTCCA..</ds:X509Certificate>
        </ds:X509Data>
      </KeyInfo>
    </ds:Signature>
    <Attribute Name="LastName">
      <AttributeValue>FFFF</AttributeValue>
    </Attribute>
    <Attribute Name="Username">
      <AttributeValue>fdfdgf</AttributeValue>
    </Attribute>
    <Attribute Name="VAL6">
      <AttributeValue>AAAAA</AttributeValue>
    </Attribute>
    <AuthnStatement AuthnInstant="2015-08-19T23:07:32.549Z">
      <AuthnContext>
        <AuthnContextClassRef>urn:federation:authentication:windows</AuthnContextClassRef>
      </AuthnContext>
    </AuthnStatement>
  </Assertion>
</samlp:Response>

<keyinfo>中缺少ADFS SAML前缀ds

1 个答案: