Re: Issue with URI

[Rob Richards]

On 11/20/18 9:00 AM, Keith Thompson wrote:

Good morning,

I'm hoping this is just an ID10T issue but I'm having an issue getting the URIs to match up in a SAML response.

I want the URI in the Reference tag to match the one (or to generate one) in the Assertion tag.  I tried just forcing it in there but that seems to invalidate the signature. 

 

$objDSig->addReference(

$doc,

XMLSecurityDSig::SHA1,

array('http://www.w3.org/2000/09/xmldsig#enveloped-signature','http://www.w3.org/2001/10/xml-exc-c14n#'),

NULL,

array('force_uri' => true, 'overwrite_id' => true)

);

Unfortunately, this is leaving a blank URI (URI="").

What's the proper way of accomplishing that? 

Thanks,

Keith

Based on your other posts and assuming the Assertion node already has an ID value, you should be passing the assertion node instead of the document and setting overwrite_id to false (assuming it has an ID already and thats what you want to use)

Rob

[Keith Thompson]

That was it! =) 

Thank you very much!