Re: Handling a token outside a WSSE header?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Since we are using a g/w device, we are at the mercy of the vendor on
this. I will speak with them and see if there is an alternative.

I am able to parse the SAML token via the following code (I'm sure
there's a better way of doing it!):

SamlTokenManager stm = new SamlTokenManager();
XmlNodeList samlNodes = envelope.GetElementsByTagName("Assertion",
"urn:oasis:names:tc:SAML:1.0:assertion");

IEnumerator snEnum = samlNodes.GetEnumerator();
snEnum.MoveNext();

XmlNode samlNode = (XmlNode)snEnum.Current;

samlToken = (SamlToken)stm.LoadTokenFromXml((XmlElement)samlNode);

However, now the SamlToken class which comes with the STS Quick Start
is complaining that the signature doesn't exist when it does the
following in the SamlToken.VerifyTokenSignature() method:
_signingToken =
SecurityTokenManager.GetTokenFromKeyInfo(signedXml.KeyInfo);

I'll keep playing around. I think the next layer of the "onion" is to
understand what the GetTokenFromKeyInfo() is attempting to do.

Thanks,
Dustin

.