Hi Kevin,<div><br></div><div>Why recreate the wheel?</div><div><br></div><div><a href=" https://wiki.jasig.org/display/CASUM">CAS</a></div><div><br></div><div>If you determine you really don&#39;t need CAS, perhaps this discussion of <a href=" https://wiki.jasig.org/display/CASUM">CAS</a> implementation and SAML+1.1 ticket validation:  <a href="https://wiki.jasig.org/display/CASUM/SAML+1.1" target="_blank">https://wiki.jasig.org/display/CASUM/SAML+1.1</a> might help?</div>

<div><br></div><div><br></div><div><br></div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Dec 28, 2012 at 2:48 PM, Kevin Brown <span dir="ltr">&lt;<a href="mailto:kevinbrownbdc@gmail.com" target="_blank">kevinbrownbdc@gmail.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div>So, new job... I&#39;ve been tasked with implementing SSO using SAML 1.1. The client provided a document that gives an example of the Response object that will be forwarded into our site when a user goes to login. I&#39;m trying to figure out how to validate the XML that I&#39;m given so that I don&#39;t blindly trust that the document hasn&#39;t been modified in some way or just faked.<br>

</div>I have the keys (DigestValue and SignatureValue), but when I try to do a sha1 of the xml (minus all the parts in the &lt;Signature&gt;&lt;/Signature&gt; section, the hash doesn&#39;t match.<br></div>Does anyone have any experience with this that they might be able to point me in the right direction?<br>

</div>
<br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div><br></div>
(503) 754-4452 Android<br>(623) 239-3392 Skype<br>(623) 688-3392 Google Voice<br>**<br><a href="http://it-clowns.com" target="_blank">it-clowns.com</a> <br>Chief Clown<br><br><br><br><br><br><br><br><br><br><br><br><br><br>

</div>