Closed Indrani123 closed 8 years ago
That's really not part of the design goals for passport-saml, so I don't think it makes sense as part of the public interface. Of course most of the logic you need is in saml.js, if you wanted to put together a PR to factor that to be more useful to you I'd be happy to take a look.
Hi Ploer,
Thanks, for updating ,
here are my Requirements for validating saml Assertion Signed Response. I need an API
saml.validate (samlAssertion,certificate,function(err,profile){
//using profile we can retrieve attributes,issuer claims etc.
}
where raw saml assertion token
This API will validate raw saml assertion based on certificate signed , else it will return some error Invalid signing
where raw saml Asseriton is the pure Assertion token ,
without any SamlRespons,SamlRequest
Let me know Is it possible to add this PR
Thanks, Indrani
I am using passport-saml , I have my own Idp server which provide both token based authentication as well as saml request response authentication functionality.
I have this scenario:
My application login to Idp server get an ssotoken.
Next Step, using this sso token to get (Security Service Token(STS) ie raw saml assertion token
Now my question is
,how to validate this raw saml-assertion using passport-saml module.Without any SAMLRequest
saml Assertion example I have:
the signed saml assertion contains signature and x509 certificate of the signer the signature part also carries the x509 certificate from the keystore
I didn't find any API ,which will do validation raw SAML Assertion based on certificate signed.
There are two method in passport-saml validateSignature and validatePostResponse which is accepting SamlResponse , but in my case it is just an Raw Saml Assertion Token.
In this case while validating saml assertion token, we dont have any web UI for IDP , all the validation is done by backend code, so there is no entry Point for configuring passport-saml, That's why I require raw saml assertion token validation.
Is it do able or not using passport-saml to validate raw Saml Assertion token based on signed certificate?
if this feature is not available , can passport-saml have this new feature to validate raw signed saml Assertion ?
Thanks