IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Verify Access (IVIA) federation using SAML2 Extensions

  • 1.  Verify Access (IVIA) federation using SAML2 Extensions

    Posted Mon September 08, 2025 02:15 PM
    Hi,
     
    We are running into a specific issue related to the SAML extension.
     
    We are trying to create an extension like the one below to meet government requirements.
     
     
    <Extensions>
    <fa:RequestedAttributes xmlns:fa="http://authn.gov/attributes">
    <fa:RequestedAttribute Name="http://interop.gov/citizen/FullName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="False"/>
    </fa:RequestedAttributes>
    </Extensions>
    Our starting point is the JavaScript SAMLPExtensions provided, but we haven't found a way to insert the attribute as requested.
     
    Thanks in advance for any feedback that could help us find a solution.


    ------------------------------
    Rudy Santos
    ------------------------------


  • 2.  RE: Verify Access (IVIA) federation using SAML2 Extensions

    Posted Thu September 11, 2025 09:09 AM

    Solved this using IDMappingExtUtils.newXMLDocument():

    const myCustomNS = "http://authn.gov/attributes";
    const requestedAttributes= d.createElementNS(myCustomNS, "fa:RequestedAttribute");
    requestedAttributes.setAttribute("xmlns:fa", myCustomNS);

        const requestedAttribute = d.createElementNS(myCustomNS, "fa:RequestedAttribute");
        requestedAttribute.setAttribute("Name", "http://interop.gov/citizen/FullName");
        requestedAttribute.setAttribute("NameFormat", "urn:oasis:names:tc:SAML:2.0:attrname-format:uri");
        requestedAttribute.setAttribute("isRequired", "False");
        requestedAttributes.appendChild(requestedAttribute);
    extension_properties.add(requestedAttributes);


    ------------------------------
    Rudy Santos
    ------------------------------