Create an authentication workflow action that validates a user's X.509 certificate
Fixed
Description fields
Basics
Logistics
Basics
Logistics
Description
Create an action that validates a X.509 certificate, given via the X509CertificateSubcontext located on the authn request context. The validation itself should be performed by a pluggable OpenSAML trust engine. If the certificate validates then set a X500Principal as the authenticated principal of the authn request context.
Additional notes:
need to determine how much PKIX "magic" to support (e.g., just CRLs or also OCSP)
Create an action that validates a X.509 certificate, given via the X509CertificateSubcontext located on the authn request context. The validation itself should be performed by a pluggable OpenSAML trust engine. If the certificate validates then set a X500Principal as the authenticated principal of the authn request context.
Additional notes:
need to determine how much PKIX "magic" to support (e.g., just CRLs or also OCSP)