FusionAuth / fusionauth-samlv2

SAML v2.0 bindings in Java using JAXB
Apache License 2.0
9 stars 2 forks source link

Add support for SAML Assertion Encryption #6

Closed spwitt closed 1 year ago

spwitt commented 1 year ago

Issue

Summary Some SAML Service Providers require that the SAML Assertion element be encrypted.

Solution Add support for replacing the Assertion element with an EncryptedAssertion element.

The Assertion is encrypted using a symmetric key according to the provided algorithm. The symmetric key is then encrypted using a public key and included with the request per the XML Encryption spec.