Subject: SAML Signature element InclusiveNamespaces
Date: 2014-05-14 20:50:41
From: Scott Bland
Source: saml-signature-element-inclusivenamespaces
----------------------------------------------------------------------

We are performing IDP initiated SAML assertion.  We are the IDP.  The service provider is asking us to remove the InclusiveNamespaces element from the signature.  I cannot see any method in the API that allows me to do this.  However, I can see it in the Signature XML.  How can I remove this element?  Here is what it looks like in our SAML assertion currently.

Thanks

<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
      <SignedInfo>
        <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
        <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
        <Reference URI="REDACTED">
          <Transforms>
            <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
            <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
              <InclusiveNamespaces PrefixList="#default saml ds xs xsi" xmlns="http://www.w3.org/2001/10/xml-exc-c14n#" />
            </Transform>
          </Transforms>
          <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
          <DigestValue>REDACTED</DigestValue>
        </Reference>
      </SignedInfo>
      <SignatureValue>REDACTED</SignatureValue>
 
---------------------------------------------------------------------- Note: This question has been asked on the Q&A forum of Thang Dang's fraudulent ComponentPro brand If you purchased anything from ComponentPro, you have been scammed. Contact the payment processor who sold you the license and ask for your money back. Back to ComponentPro Q&A Forum Index