Validate
Validates an existing SAML token.
Method
Signature
Validate (token : RequestSecurityTokenType) returns RequestSecurityTokenResponseType
Parameter
token :
RequestSecurityTokenType
– Security token request containing a SAML token previously obtained from a
vCenter Single Sign-On server. The following
RequestSecurityTokenType
elements are required for a
Validate
request; the
remaining elements are optional.
- RequestType– Must specify the URL“http://docs.oasis-open.org/ws-sx/ws-trust/200512/Validate”.
- ValidateTarget– Identifies the SAML token to be validated.
- Sigattribute (UseKeyelement) – Specifies a security token that contains an existing certificate key.
- Contextattribute – Required if you include aBinaryExchangeTypeelement for SSPI authentication.
Return Value
RequestSecurityTokenResponseType
– Response containing the validated token.
Comments
Performs validation of the token and its
subject. It includes but is not limited to validations of the following
elements:
- Token signature
- Token lifetime
- Token subject
- Token delegates
- Group(s) to which the subject belongs