Cool, cool! Thanks for the thoughtful response. Will be interested to see your replay approach when you release it. We implemented it but have a different set of constraints than your service, of course.
If you want to look at another SAML implementation (perhaps to gather additional CVEs or for testing), we've open sourced our SAML bindings for Java: https://github.com/FusionAuth/fusionauth-samlv2
Comments
Cool, cool! Thanks for the thoughtful response. Will be interested to see your replay approach when you release it. We implemented it but have a different set of constraints than your service, of course.
If you want to look at another SAML implementation (perhaps to gather additional CVEs or for testing), we've open sourced our SAML bindings for Java: https://github.com/FusionAuth/fusionauth-samlv2
Any opinions you can share re opensaml for Java?
I'm not super close to that part of the code, so I don't have any opinions. I'll ask the team if they do.