SOAPUI 3.6.1 wsse1.0 SAML with signature/encryption
Hi,
I'm trying to invoke webservice having wsse 1.0 SAML policy attached from SOAPUI (3.6.1). Following is the SAML assertion used:
<Assertion AssertionID="be7d9814c36381c27fefa89d8f27e126" IssueInstant="2009-10-05T07:51:57.374Z" Issuer="www.oracle.com" MajorVersion="1" MinorVersion="1" xmlns="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"><Conditions NotBefore="2009-10-05T07:51:57.374Z" NotOnOrAfter="2011-10-15T17:51:57.374Z"/>
<AuthenticationStatement AuthenticationInstant="2009-10-05T07:51:57.374Z" AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:password">
<Subject>
<NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" NameQualifier="notRelevant">SYSADMIN</NameIdentifier>
<SubjectConfirmation>
<ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:sender-vouches</ConfirmationMethod>
</SubjectConfirmation>
</Subject>
</AuthenticationStatement>
</Assertion>
When I create a new Request (Request11.txt) and make a request (after applying configuration), I'm getting error:
Caused by: oracle.security.xmlsec.enc.XEException: Error in parsing XML (property xml.debug.decrypt should be enabled for more details):-
at oracle.security.xmlsec.enc.XEEncryptedData.decryptAndParse(XEEncryptedData.java:1095)
at oracle.security.xmlsec.enc.XEEncryptedData.decryptAndReplace(XEEncryptedData.java:1569)
at oracle.security.xmlsec.enc.XEEncryptedData.decryptAndReplace(XEEncryptedData.java:1632)
................
Caused by: oracle.xml.parser.v2.XMLParseException: Namespace prefix 'tes' used but not declared.
at oracle.xml.parser.v2.XMLError.flushErrors1(XMLError.java:323)
at oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingParser.java:343)
at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:226)
at oracle.xml.jaxp.JXDocumentBuilder.parse(JXDocumentBuilder.java:156)
at oracle.xml.jaxp.JXDocumentBuilder.parse(JXDocumentBuilder.java:111)
at oracle.security.xmlsec.enc.XEEncryptedData.unwrapXML(XEEncryptedData.java:1508)
... 51 more
When I again apply configuration and send a request (Request12.txt), I get following error:
Caused by: oracle.wsm.security.policy.scenario.policycompliance.PolicyComplianceException: WSM-00033 : The encrypted message elements or parts do not comply with the policy. The following headers/elements (<name space: local name>) or attachments (<attachment ID: attachment type>) must be encrypted:-
< urn:oasis:names:tc:SAML:1.0:assertion: Assertion >
at oracle.wsm.security.policy.scenario.policycompliance.impl.ComplianceEngine.postDecryptionCompliance(ComplianceEngine.java:257)
at oracle.wsm.security.policy.scenario.policycompliance.impl.ComplianceEngine.checkCompliance(ComplianceEngine.java:388)
I'm not sure what is going wrong here. Service is invoked against OWSM 11g. I'm attaching all required files.
Would be great if someone can throw light on this issue.
Thanks in advance,
Vikas
I'm trying to invoke webservice having wsse 1.0 SAML policy attached from SOAPUI (3.6.1). Following is the SAML assertion used:
<Assertion AssertionID="be7d9814c36381c27fefa89d8f27e126" IssueInstant="2009-10-05T07:51:57.374Z" Issuer="www.oracle.com" MajorVersion="1" MinorVersion="1" xmlns="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"><Conditions NotBefore="2009-10-05T07:51:57.374Z" NotOnOrAfter="2011-10-15T17:51:57.374Z"/>
<AuthenticationStatement AuthenticationInstant="2009-10-05T07:51:57.374Z" AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:password">
<Subject>
<NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified" NameQualifier="notRelevant">SYSADMIN</NameIdentifier>
<SubjectConfirmation>
<ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:sender-vouches</ConfirmationMethod>
</SubjectConfirmation>
</Subject>
</AuthenticationStatement>
</Assertion>
When I create a new Request (Request11.txt) and make a request (after applying configuration), I'm getting error:
Caused by: oracle.security.xmlsec.enc.XEException: Error in parsing XML (property xml.debug.decrypt should be enabled for more details):-
at oracle.security.xmlsec.enc.XEEncryptedData.decryptAndParse(XEEncryptedData.java:1095)
at oracle.security.xmlsec.enc.XEEncryptedData.decryptAndReplace(XEEncryptedData.java:1569)
at oracle.security.xmlsec.enc.XEEncryptedData.decryptAndReplace(XEEncryptedData.java:1632)
................
Caused by: oracle.xml.parser.v2.XMLParseException: Namespace prefix 'tes' used but not declared.
at oracle.xml.parser.v2.XMLError.flushErrors1(XMLError.java:323)
at oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingParser.java:343)
at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:226)
at oracle.xml.jaxp.JXDocumentBuilder.parse(JXDocumentBuilder.java:156)
at oracle.xml.jaxp.JXDocumentBuilder.parse(JXDocumentBuilder.java:111)
at oracle.security.xmlsec.enc.XEEncryptedData.unwrapXML(XEEncryptedData.java:1508)
... 51 more
When I again apply configuration and send a request (Request12.txt), I get following error:
Caused by: oracle.wsm.security.policy.scenario.policycompliance.PolicyComplianceException: WSM-00033 : The encrypted message elements or parts do not comply with the policy. The following headers/elements (<name space: local name>) or attachments (<attachment ID: attachment type>) must be encrypted:-
< urn:oasis:names:tc:SAML:1.0:assertion: Assertion >
at oracle.wsm.security.policy.scenario.policycompliance.impl.ComplianceEngine.postDecryptionCompliance(ComplianceEngine.java:257)
at oracle.wsm.security.policy.scenario.policycompliance.impl.ComplianceEngine.checkCompliance(ComplianceEngine.java:388)
I'm not sure what is going wrong here. Service is invoked against OWSM 11g. I'm attaching all required files.
Would be great if someone can throw light on this issue.
Thanks in advance,
Vikas
