Can SAML tokens be used to exchange symmetric keys?
-
30-06-2021 - |
Question
I would like the client connect to an STS to obtain a SAML token and use it to authenticate it self to a service, but I want the token to contain more information than the standard SAML token, I would also like to avoid using transport level security. In a sense it will be very similar to a kerberos ticket having the session key
is this possible?
La solution
Yes, definetely possible. I've seen SAML holder-of-key with symmetric encryption being applied in one place.
Licencié sous: CC-BY-SA avec attribution
Non affilié à StackOverflow