SAML 1.1 Post Profile

[aljacinto]

These changes are for supporting SAML 1.1 Post Profile. If approved, I will add/change the picketlink-quickstarts and work on the signature support as well. Thanks.

picketlink-bindings/picketlink-tomcat-common/src/main/java/org/picketlink/identity/federation/bindings/tomcat/idp/AbstractIDPValve.java:

• Put an end point where the SAMLResponse is going to be posted.
• Make target as the final destination (RelayState in SAMLv2).
• Added confirmation method in SubjectConfirmation per the standard post profile.
• Set the recipient in the SAML11Response again per the standard.
• Use the strict post binding flag for post binding requested of the holder. With this, if strict post binding flag is false then it will be just the redirect (GET).

picketlink-core/src/main/java/org/picketlink/identity/federation/core/saml/v1/SAML11Constants.java

• Added constant for end point

picketlink-core/src/main/java/org/picketlink/identity/federation/core/saml/v2/holders/DestinationInfoHolder.java

• Added target property and corresponding constructor and getter

picketlink-core/src/main/java/org/picketlink/identity/federation/web/util/IDPWebRequestUtil.java

• Process the target property
• Changed the constructor to include target property
• Add builder method for target property

picketlink-core/src/main/java/org/picketlink/identity/federation/web/util/PostBindingUtil.java

• If the holder contains target then it will use target instead of relayState.

picketlink-bindings/picketlink-tomcat5/src/main/java/org/picketlink/identity/federation/bindings/tomcat/sp/SAML11SPPostFormAuthenticator.java

• SP Authenticator for handling post changes from IdP

[pedroigor]

Hi,

We had some huge changes to the upstream code since this PR was created.

This PR is quite good, but we prefer to avoid those changes for now.

Thanks for your time and sorry for the late response.