4 Replies Latest reply on Apr 19, 2012 7:21 AM by aljacinto

    SAML 1.1 and Signatures

    pipo1000

      Hello,

       

      I am busy looking at the new features of Picketlink 2.02 and one caught my eye. The implementation

      of SAML 1.1. As I looked into the examples and the source I can not see any code dedicated to signatures

      checking or configuration. Is this correct? And yes, do you plan to support signatures in the near

      future with SAML 1.1 as without signatures the implementation is about useless for us as it is

      to easy to spoof a SAMLResponse this way and hack the system.

       

      Also

       

      Kind regrards,

       

      Edwin

      ADP PersonnelView