Add policy rules for SAML 1 SSO and SAML 2 Bearer confirmation, with unit tests.

[shibboleth/cpp-opensaml.git] / samltest / data / saml2 / profile / SAML2Assertion.xml

diff --git a/samltest/data/saml2/profile/SAML2Assertion.xml b/samltest/data/saml2/profile/SAML2Assertion.xml
index 758e79e..e423ec1 100644 (file)
--- a/samltest/data/saml2/profile/SAML2Assertion.xml
+++ b/samltest/data/saml2/profile/SAML2Assertion.xml
@@ -1,6 +1,11 @@
 <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="aident" IssueInstant="1970-01-02T01:01:02.100Z" Version="2.0">
     <saml:Issuer>https://idp.example.org/</saml:Issuer>
 <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="aident" IssueInstant="1970-01-02T01:01:02.100Z" Version="2.0">
     <saml:Issuer>https://idp.example.org/</saml:Issuer>

-    <saml:Subject><saml:NameID>John Doe</saml:NameID></saml:Subject>
+    <saml:Subject>
+        <saml:NameID>John Doe</saml:NameID>
+        <saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
+            <saml:SubjectConfirmationData NotOnOrAfter="2030-01-02T01:01:02.100Z"/>
+        </saml:SubjectConfirmation>
+    </saml:Subject>

     <saml:Conditions NotBefore="2008-01-02T01:01:02.100Z" NotOnOrAfter="2030-01-02T01:01:02.100Z">
         <saml:AudienceRestriction>
             <saml:Audience>https://sp.example.org</saml:Audience>
     <saml:Conditions NotBefore="2008-01-02T01:01:02.100Z" NotOnOrAfter="2030-01-02T01:01:02.100Z">
         <saml:AudienceRestriction>
             <saml:Audience>https://sp.example.org</saml:Audience>