[higgins-dev] STS Question: X509 Certificate in token signature

["Daniel Sanders" <dsanders@xxxxxxxxxx>]

Mike,

Here is the defect I logged for this issue:

https://bugs.eclipse.org/bugs/show_bug.cgi?id=192277

>>>>

Mike,
 
Currently, the Higgins STS I have deployed issues a SAML token where the signature of the token contains the issuer's public key, as follows:
 
<Signature>
   ...
   <KeyInfo>
      ...
      <RSAKeyValue>
         <Modulus>...</Modulus>
         <Exponent>...</Exponent>
 
I have been asked about having the X509 certificate sent so that the token issuer can be verified by the RP.  I believe the signature would then look something like the following (I don't know the exact structure, but I think this is close):
 
<Signature>
   ...
   <KeyInfo>
      ...
      <X509Certificate>
         ...
      </X509Certificate>
 
Is this possible in the Higgins STS?  If so, how do I go about enabling it in our deployment of the STS?
 
Thanks,

Daniel