LassoLibAssertion: Lasso Reference Manual

## LassoLibAssertion LassoLibAssertion — <lib:Assertion> |

## Functions

LassoLibAssertion * | lasso_lib_assertion_new ()
LassoLibAssertion * | lasso_lib_assertion_new_full ()

## Types and Values

struct | LassoLibAssertion

## Description

> Authentication assertions provided in an AuthnResponse element MUST be of type AssertionType, which is an extension of saml:AssertionType, so that the RequestID attribute from the original AuthnRequest MAY be included in the InResponseTo attribute in the Assertion element. This is done because it is not required that the AuthnResponse element itself be signed. Instead, the individual Assertion elements contained MUST each be signed. Note that it is optional for the InResponseTo to be present. Its absence indicates that the AuthnResponse has been unilaterally sent by the identity provider without a corresponding AuthnRequest message from the service provider. If the attribute is present, it MUST be set to the RequestID of the original AuthnRequest.

Figure 1. Schema fragment for lib:Assertion

    <xs:element name="Assertion" type="AssertionType" substitutionGroup="saml:Assertion" />
    <xs:complexType name="AssertionType">
      <xs:complexContent>
        <xs:extension base="saml:AssertionType">
          <xs:attribute name="InResponseTo" type="xs:NCName" use="optional"/>
        </xs:extension>
      </xs:complexContent>
    </xs:complexType>

## Functions

### lasso_lib_assertion_new ()

    LassoLibAssertion *
    lasso_lib_assertion_new (void);

Creates a new LassoLibAssertion object.

#### Returns

a newly created LassoLibAssertion object

### lasso_lib_assertion_new_full ()

    LassoLibAssertion *
    lasso_lib_assertion_new_full (const char *issuer,
                                  const char *requestID,
                                  const char *audience,
                                  const char *notBefore,
                                  const char *notOnOrAfter);

Creates a new LassoLibAssertion object and initializes its Issuer, InResponseTo, AudienceRestrictionCondition, notBefore and notOnOrAfter fields or attributes.

#### Parameters

issuer | the issuer entityID string |
requestID | the identifier of the request which initiated the creation of this assertion. | [allow-none]
audience | the entityID of the receiver of this assertion. | [allow-none]
notBefore | a timestamp formatted as iso-8601 |
notOnOrAfter | a timestamp formatted as iso-8601 |

#### Returns

a newly created LassoLibAssertion object

## Types and Values

### struct LassoLibAssertion

    struct LassoLibAssertion {
    	LassoSamlAssertion parent;

    	char *InResponseTo;
    };