Configuration Guides › Federation Security Services Guide › Configure SOA Security Manager as a SAML 1.x Producer › Using SAML 1.x Assertions to Authenticate Users › A Security Issue Regarding SAML 1.x Assertions

Previous Topic: Using SAML 1.x Assertions to Authenticate Users

Next Topic: Configuring a SAML 1.x Assertion
A Security Issue Regarding SAML 1.x Assertions

The SAML Assertion Generator creates an assertion based on a session for a user that has been authenticated at any authentication scheme protection level. You can control which users an assertion is generated for, but not based on the protection level at which they are authenticated.

You can have resources that require a particular protection level. When your resources are secured at different protection levels, verify that when users authenticate they do so with the desired protection level.