Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save KalemaEdgar/adad5304ae98bf98d420b2c108b13307 to your computer and use it in GitHub Desktop.
Save KalemaEdgar/adad5304ae98bf98d420b2c108b13307 to your computer and use it in GitHub Desktop.
SAML Request and response that keeps redirecting
*******************************************
REQUEST
*******************************************
<samlp:AuthnRequest
AssertionConsumerServiceURL="https://localhost.com/simplesaml/modules/saml/sp/saml2-acs.php/wso2-sp"
Destination="https://localhost.com:9443/samlsso" ID="_dde1b120b60c8e7c67c327c82250cc9a947f454021"
IssueInstant="2020-04-19T01:27:34Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
<saml:Issuer>simplesaml</saml:Issuer>
<samlp:NameIDPolicy AllowCreate="true" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"/>
</samlp:AuthnRequest>
*******************************************
RESPONSE
*******************************************
<?xml version="1.0" encoding="UTF-8"?>
<saml2p:Response
Destination="https://localhost.com/simplesaml/modules/saml/sp/saml2-acs.php/wso2-sp"
ID="_373e5b8a3c078f4c4362dab707d1a317" InResponseTo="_5dcda36ddd28462e84b557a9d524095c60b96498f9"
IssueInstant="2020-04-19T01:43:04.047Z" Version="2.0"
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol">
<saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://localhost.com:9443/samlsso</saml2:Issuer>
<saml2p:Status>
<saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
</saml2p:Status>
<saml2:Assertion ID="_1f1f87c8b9be216c4ebf38517f9179be" IssueInstant="2020-04-19T01:43:04.047Z"
Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://localhost.com:9443/samlsso</saml2:Issuer>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_1f1f87c8b9be216c4ebf38517f9179be">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
<ec:InclusiveNamespaces PrefixList="xsd" xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>ZTWlDDHfO2rXvI9UGItMxGh23ic=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>VGhlIHN0YXRlIG11c3QgYmUgYW4gYXNzb2NpYXRpdmUgYXJyYXkuIFRoaXMgY2xhc3</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>VGhlIHN0YXRlIG11c3QgYmUgYW4gYXNzb2NpYXRpdmUgYXJyYXkuIFRoaXMgY2xhc3</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>
<saml2:Subject>
<saml2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">wickrema</saml2:NameID>
<saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml2:SubjectConfirmationData InResponseTo="_5dcda36ddd28462e84b557a9d524095c60b96498f9"
NotOnOrAfter="2020-04-19T01:48:04.047Z"
Recipient="https://localhost.com/simplesaml/modules/saml/sp/saml2-acs.php/wso2-sp"/>
</saml2:SubjectConfirmation>
</saml2:Subject>
<saml2:Conditions NotBefore="2020-04-19T01:43:04.047Z" NotOnOrAfter="2020-04-19T01:48:04.047Z">
<saml2:AudienceRestriction>
<saml2:Audience>simplesaml</saml2:Audience>
</saml2:AudienceRestriction>
</saml2:Conditions>
<saml2:AuthnStatement AuthnInstant="2020-04-19T01:33:14.633Z"
SessionIndex="f4521a37-b98e-4e2e-90fd-7faba4677f01">
<saml2:AuthnContext>
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef>
</saml2:AuthnContext>
</saml2:AuthnStatement>
<saml2:AttributeStatement>
<saml2:Attribute Name="fname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">Wickrema</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute Name="Mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic">
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xsd:string">wickrema@abc.com</saml2:AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement>
</saml2:Assertion>
</saml2p:Response>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment