Created
April 19, 2020 03:54
-
-
Save KalemaEdgar/adad5304ae98bf98d420b2c108b13307 to your computer and use it in GitHub Desktop.
SAML Request and response that keeps redirecting
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
******************************************* | |
REQUEST | |
******************************************* | |
<samlp:AuthnRequest | |
AssertionConsumerServiceURL="https://localhost.com/simplesaml/modules/saml/sp/saml2-acs.php/wso2-sp" | |
Destination="https://localhost.com:9443/samlsso" ID="_dde1b120b60c8e7c67c327c82250cc9a947f454021" | |
IssueInstant="2020-04-19T01:27:34Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" | |
Version="2.0" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" | |
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"> | |
<saml:Issuer>simplesaml</saml:Issuer> | |
<samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/> | |
</samlp:AuthnRequest> | |
******************************************* | |
RESPONSE | |
******************************************* | |
<?xml version="1.0" encoding="UTF-8"?> | |
<saml2p:Response | |
Destination="https://localhost.com/simplesaml/modules/saml/sp/saml2-acs.php/wso2-sp" | |
ID="_373e5b8a3c078f4c4362dab707d1a317" InResponseTo="_5dcda36ddd28462e84b557a9d524095c60b96498f9" | |
IssueInstant="2020-04-19T01:43:04.047Z" Version="2.0" | |
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"> | |
<saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" | |
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://localhost.com:9443/samlsso</saml2:Issuer> | |
<saml2p:Status> | |
<saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/> | |
</saml2p:Status> | |
<saml2:Assertion ID="_1f1f87c8b9be216c4ebf38517f9179be" IssueInstant="2020-04-19T01:43:04.047Z" | |
Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" | |
xmlns:xsd="http://www.w3.org/2001/XMLSchema"> | |
<saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://localhost.com:9443/samlsso</saml2:Issuer> | |
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> | |
<ds:SignedInfo> | |
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/> | |
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> | |
<ds:Reference URI="#_1f1f87c8b9be216c4ebf38517f9179be"> | |
<ds:Transforms> | |
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/> | |
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"> | |
<ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/> | |
</ds:Transform> | |
</ds:Transforms> | |
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> | |
<ds:DigestValue>ZTWlDDHfO2rXvI9UGItMxGh23ic=</ds:DigestValue> | |
</ds:Reference> | |
</ds:SignedInfo> | |
<ds:SignatureValue>VGhlIHN0YXRlIG11c3QgYmUgYW4gYXNzb2NpYXRpdmUgYXJyYXkuIFRoaXMgY2xhc3</ds:SignatureValue> | |
<ds:KeyInfo> | |
<ds:X509Data> | |
<ds:X509Certificate>VGhlIHN0YXRlIG11c3QgYmUgYW4gYXNzb2NpYXRpdmUgYXJyYXkuIFRoaXMgY2xhc3</ds:X509Certificate> | |
</ds:X509Data> | |
</ds:KeyInfo> | |
</ds:Signature> | |
<saml2:Subject> | |
<saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">wickrema</saml2:NameID> | |
<saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"> | |
<saml2:SubjectConfirmationData InResponseTo="_5dcda36ddd28462e84b557a9d524095c60b96498f9" | |
NotOnOrAfter="2020-04-19T01:48:04.047Z" | |
Recipient="https://localhost.com/simplesaml/modules/saml/sp/saml2-acs.php/wso2-sp"/> | |
</saml2:SubjectConfirmation> | |
</saml2:Subject> | |
<saml2:Conditions NotBefore="2020-04-19T01:43:04.047Z" NotOnOrAfter="2020-04-19T01:48:04.047Z"> | |
<saml2:AudienceRestriction> | |
<saml2:Audience>simplesaml</saml2:Audience> | |
</saml2:AudienceRestriction> | |
</saml2:Conditions> | |
<saml2:AuthnStatement AuthnInstant="2020-04-19T01:33:14.633Z" | |
SessionIndex="f4521a37-b98e-4e2e-90fd-7faba4677f01"> | |
<saml2:AuthnContext> | |
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef> | |
</saml2:AuthnContext> | |
</saml2:AuthnStatement> | |
<saml2:AttributeStatement> | |
<saml2:Attribute Name="fname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"> | |
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">Wickrema</saml2:AttributeValue> | |
</saml2:Attribute> | |
<saml2:Attribute Name="Mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"> | |
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">wickrema@abc.com</saml2:AttributeValue> | |
</saml2:Attribute> | |
</saml2:AttributeStatement> | |
</saml2:Assertion> | |
</saml2p:Response> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment