# The SAMLTokenProvider

The [SAMLTokenProvider](http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/token/provider/SAMLTokenProvider.java?view=markup) can issue SAML 1.1 and SAML 2.0 tokens. To request a SAML 1.1 token, the client must use one of the following Token Types:

* http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1
* urn:oasis:names:tc:SAML:1.0:assertion

To request a SAML 2.0 token, the client must use one of the following Token Types:

* http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0

* urn:oasis:names:tc:SAML:2.0:assertion

The following properties can be configured on the SAMLTokenProvider directly:

* List<[AttributeStatementProvider](http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/token/provider/AttributeStatementProvider.java?view=markup)> attributeStatementProviders - A list of objects that can add attribute statements to the token.
* List<[AuthenticationStatementProvider](http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/token/provider/AuthenticationStatementProvider.java?view=markup)> authenticationStatementProviders - A list of objects that can add authentication statements to the token.
* List<[AuthDecisionStatementProvider](http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/token/provider/AuthDecisionStatementProvider.java?view=markup)> authDecisionStatementProviders - A list of objects that can add authorization decision statements to the token.
* [SubjectProvider](http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/token/provider/SubjectProvider.java?view=markup) subjectProvider - An object used to add a Subject to the token.
* [ConditionsProvider](http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/token/provider/ConditionsProvider.java?view=markup) conditionsProvider - An object used to add a Conditions statement to the token.
* boolean signToken - Whether to sign the token or not. The default is true.
* Map<String, [SAMLRealm](http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/token/realm/SAMLRealm.java?view=markup)> realmMap - A map of realms to SAMLRealm objects.

We will explain each of these properties in more detail in the next few sections.