Configuration Guides › Policy Server Configuration Guide › Responses and Response Groups › Configure Responses to Generate SAML Session Tickets for Outgoing Messages › Use SAML Session Ticket Assertion Variables for a Session Ticket Response

Use SAML Session Ticket Assertion Variables for a Session Ticket Response

You can use assertion variables to help the SOA Agent build the assertion.

Example 1

If the web service is protected by the XML-DSIG authentication scheme, create an attribute that extracts the client’s public key from the certificate and adds it to the SAML assertion. To instruct the SOA Agent to get the public key from the digital certificate, enter the variable TXM_Public_Key with the value XMLDSIG.

The following table shows how to complete the Response Attribute fields:

If the public key is coming from the user directory, two response attributes are required. The fields for the first attribute in the Response Attribute dialog would be as follows:

The fields for the second attribute in the Response Attribute dialog would be as follows:

Example 2

To ensure that the assertion is placed in the SOAP envelope message header, the fields in the Response Attribute dialog would be as follows: