Conflict between SAML 2.0 token profile and WS-Trust

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Minor
    • SAML 2.0 Profile PR
    • Affects Version/s: SAML 2.0 Profile PR
    • Component/s: Spec
    • None
    • Hide

      Change the default to symmetric, to be consistent with WS-Trust.

      Show
      Change the default to symmetric, to be consistent with WS-Trust.

      The SAML 2.0 token profile currently says:
      If a token request does not include a <wst:KeyType> element, the Identity Provider SHOULD assume that an asymmetric proof key is required.

      This is contrary to the WS-Trust spec, Section 9.2 (Key and Encryption Requirements) which says that in the absence of a <KeyType> element, the key type should default to a symmetric key.

            Assignee:
            Unassigned
            Reporter:
            Michael Jones (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated: