Custom POST Form Parameter Names

9-4 Programming Security for Oracle WebLogic Server

9.2 Custom POST Form Parameter Names

The parameters names passed to the POST form when a custom POST form is specified for SAML POST profile handling depend on which SAML provider is configured. ■ For the WebLogic Server 9.1and higher, Federation Services implementation in effect when V2 providers are configured, see Table 9–3 . ■ For the WebLogic Server 9.0 SAML services implementation in effect when V1 providers are configured, see Table 9–4 . The tables provide the parameter names and their data types required for casting the returned Java Object. For both implementations, the SAML response itself is passed using the parameter name specified by SAML: SAMLResponse String: The base64-encoded SAML Response element. MetadataPartner Metadata partner contains contact information for the partner, which is mainly required by the SAML 2.0 metadata profile. Partner Abstract representation of a SAML 2.0 partner. This interface defines mandatory information for a partner. SPPartner Abstract representation of a SAML 2.0 Service Provider partner. WebSSOIdPPartner Abstract representation of a SAML 2.0 Identity Provider partner for Web SSO profile. WebSSOPartner Abstract representation of a SAML 2.0 partner for Web SSO profile. WebSSOSPPartner Abstract representation of a SAML 2.0 Service Provider partner for Web SSO profile. WSSIdPPartner Abstract representation of a SAML 2.0 Identity Provider partner for WSS SAML Token profile. WSSPartner Abstract representation of a SAML 2.0 partner for WSS SAML Token profile. WSSSPPartner Abstract representation of a SAML 2.0 Service Provider partner for WSS SAML Token profile. It has no specific attributesmethods. Table 9–3 SAML V2 Provider Custom POST Form Parameters Parameter Description TARGET String The TARGET URL specified as a query parameter on the incoming Intersite Transfer Service ITS request. SAML_AssertionConsumerURL String The URL of the Assertion Consumer Service ACS at the destination site where the form should be POSTed. Table 9–2 Cont. WebLogic SAML 2.0 APIs WebLogic SAML 2.0 APIs Description SAML APIs 9-5

9.3 Creating Assertions for Non-WebLogic SAML 1.1 Relying Parties