opensaml-eidas's Introduction

opensaml-eidas

OpenSAML extensions for the eIDAS Framework.

Note: Support for OpenSAML versions prior to version 5 is implemented by the https://github.com/litsec/eidas-opensaml repository.

eIDAS (EU REGULATION 910/2014 on electronic identification and trust services for electronic transactions in the European internal market) defines requirements on cross-border recognition of electronic identification means in EU.

The eIDAS technical specifications defines a number of SAML elements and attribute definitions which are normally not supported by standard SAML software. The eidas-opensaml Open Source Java library extends the OpenSAML framework with support for the definitions from the eIDAS technical specifications.

The following eIDAS specifications are implemented:

How to use the use the eidas-opensaml library

The eidas-opensaml artifacts are published to Maven central and a dependency to the library should be included as follows in the application POM-file:

<dependency>
  <groupId>se.swedenconnect.opensaml</groupId>
  <artifactId>opensaml-eidas</artifactId>
  <version>${opensaml.eidas.version}</version>
</dependency>

Documentation

API documentation - https://docs.swedenconnect.se/opensaml-eidas/apidocs/.

Examples

Creating an eIDAS AuthnRequest message

The eIDAS SAML Message Format v1.4 specification describes how a SAML AuthnRequest message should be put together to comply to the eIDAS specifications.

CreateAuthnRequestExample.java illustrates how you could create an authentication request message using the opensaml-eidas library.

Parsing an Assertion

An assertion issued from an eIDAS service will contain the attributes defined in eIDAS SAML Attribute Profile.

ParseAssertionExample.java shows how to parse an Assertion and get hold of all attribute values.

Resources

eIDAS Specifications

Swedish eID Framework

Technical specifications for the Swedish eID Framework
Sweden Connect - The portal for the Sweden Connect federation.
Sweden Connect - Sandbox - The portal for the Swedish eID and eIDAS test infrastructure.

opensaml-eidas's People

Contributors

Stargazers

Watchers

opensaml-eidas's Issues

Update MDSL implementation given updated schema

See swedenconnect/schemas#36

Fix CurrentAddressType so that string contents may be get and set

We forgot to add setValue and getValue and only focuses on the actual contents (pobox, etc).

Upgrade to OpenSAML 5.1.2

Encryption configuration updates

An update to the default encryption policy is required to enforce ECDH key wrapping even if Peer does not declare explicit key wrapping encryption algorithms

Version 1.4 of eIDAS exclude support for http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p
There is a need to update this in the eIDAS configuration profile, while maintaining support for backwards compatibility with nodes that may not support http://www.w3.org/2009/xmlenc11#rsa-oaep

Recommend Projects