Issue

• Does Red Hat support the WS-Security SAML Token profile?
• In EAP 6, when trying to use the SAML Token profile functionality provided by CXF, I get the following exception:

WARNING [org.apache.cxf.phase.PhaseInterceptorChain] (http-localhost/127.0.0.1:8080-1) Interceptor for {http://org.jboss.ws/samples/retail/profile}ProfileMgmtService has thrown exception, unwinding now: org.apache.cxf.binding.soap.SoapFault: General security error (Unable to load class org.apache.ws.security.validate.SamlAssertionValidator)
    at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.createSoapFault(WSS4JInInterceptor.java:643) [cxf-rt-ws-security-2.4.6-redhat-1.jar:2.4.6-redhat-1]
    at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:308) [cxf-rt-ws-security-2.4.6-redhat-1.jar:2.4.6-redhat-1]
    at org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor.handleMessage(WSS4JInInterceptor.java:85) [cxf-rt-ws-security-2.4.6-redhat-1.jar:2.4.6-redhat-1]
    ...
Caused by: java.lang.ClassNotFoundException: org.opensaml.xml.validation.ValidationException from [Module "org.apache.ws.security:main" from local module loader @35549f94 (roots: C:\EAP-6.0.0.GA\jboss-eap-6.0\modules)]
    at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:190)
    at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468)
    at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456)
    at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:423)
    at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398)
    at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120)
    at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:316) [rt.jar:1.6.0_17]
    ... 37 more