Rookie question: OpenSAML-Java

[Joynny Jones]

I want to write a client that will send an auth request to an IdP and retrieve an Auth Token.


I was reading about OpenSAML-Java, and it gave the following disclaimer, stateing that OpenSAML-java is for


certain types of advanced clients. It is not by itself an implementation of any of those things, and developers are strongly encouraged to evaluate existing products before creating their own as doing so is a lot of work and prone to error unless you have significant expertise in SAML. The low-level nature of the library and lack of documentation makes the software a poor choice for beginners or those without extensive background in the area.


So what product should I use to create an auth request from a client. This product or some other package ?

Thanks in advance

[Cantor, Scott]

Post by Joynny Jones
So what product should I use to create an auth request from a client.
This product or some other package ?

You should use an existing SAML SP implementation, Shibboleth or
otherwise. OpenSAML questions, should you have them, belong on the dev
list.

Fundamentally you should, IMHO, rethink your goals. Your goal should be to
avoid any dependency on SAML in your application, and you should architect
based on standard web server interfaces and assumptions and leave the SAML
to your web server and its configuration.

-- Scott