Skip to content

Instantly share code, notes, and snippets.

@grahamb

grahamb/saml_response.xml Secret

Created June 2, 2020 21:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save grahamb/4ae42200d99a8a2b9371b8f94c90dd58 to your computer and use it in GitHub Desktop.
Save grahamb/4ae42200d99a8a2b9371b8f94c90dd58 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
saml_response.xml
<saml2p:Response Destination="https://sentry.its.sfu.ca/saml/acs/it-services/"
ID="_5db172e158dfd2ca31d42cbbe62b019b"
InResponseTo="ONELOGIN_bcef36bb7e0e85f4d4ee815bd9820d37247846b3"
IssueInstant="2020-06-02T21:10:01.396Z"
Version="2.0"
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
>
<saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">https://idp-stage.its.sfu.ca/idp/shibboleth</saml2:Issuer>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
<ds:Reference URI="#_5db172e158dfd2ca31d42cbbe62b019b">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
<ec:InclusiveNamespaces PrefixList="xsd"
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"
/>
</ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
<ds:DigestValue>.....</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>.....</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>......</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>
<saml2p:Status>
<saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
</saml2p:Status>
<saml2:Assertion ID="_26a5dec0ab77cfab00cab9e98e34f80f"
IssueInstant="2020-06-02T21:10:01.396Z"
Version="2.0"
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
>
<saml2:Issuer>https://idp-stage.its.sfu.ca/idp/shibboleth</saml2:Issuer>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
<ds:Reference URI="#_26a5dec0ab77cfab00cab9e98e34f80f">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
<ec:InclusiveNamespaces PrefixList="xsd"
xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"
/>
</ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
<ds:DigestValue>.....</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>....</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>......</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>
<saml2:Subject>
<saml2:NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
NameQualifier="https://idp-stage.its.sfu.ca/idp/shibboleth"
SPNameQualifier="https://sentry.its.sfu.ca/saml/metadata/it-services/"
>.....</saml2:NameID>
<saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<saml2:SubjectConfirmationData Address="23.16.205.4"
InResponseTo="ONELOGIN_bcef36bb7e0e85f4d4ee815bd9820d37247846b3"
NotOnOrAfter="2020-06-02T21:15:01.449Z"
Recipient="https://sentry.its.sfu.ca/saml/acs/it-services/"
/>
</saml2:SubjectConfirmation>
</saml2:Subject>
<saml2:Conditions NotBefore="2020-06-02T21:10:01.396Z"
NotOnOrAfter="2020-06-02T21:15:01.396Z"
>
<saml2:AudienceRestriction>
<saml2:Audience>https://sentry.its.sfu.ca/saml/metadata/it-services/</saml2:Audience>
</saml2:AudienceRestriction>
</saml2:Conditions>
<saml2:AuthnStatement AuthnInstant="2020-06-02T21:10:01.003Z"
SessionIndex="_c6975eaad46d798065e224f53b9c5e4b"
>
<saml2:SubjectLocality Address="23.16.205.4" />
<saml2:AuthnContext>
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml2:AuthnContextClassRef>
</saml2:AuthnContext>
</saml2:AuthnStatement>
<saml2:AttributeStatement>
<saml2:Attribute FriendlyName="cn"
Name="urn:oid:2.5.4.3"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xsd:string"
>Graham Ballantyne</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="uid"
Name="urn:oid:0.9.2342.19200300.100.1.1"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xsd:string"
>grahamb</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="sn"
Name="urn:oid:2.5.4.4"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xsd:string"
>Ballantyne</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="givenName"
Name="urn:oid:2.5.4.42"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xsd:string"
>Graham</saml2:AttributeValue>
</saml2:Attribute>
<saml2:Attribute FriendlyName="mail"
Name="urn:oid:0.9.2342.19200300.100.1.3"
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
>
<saml2:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:type="xsd:string"
>grahamb@sfu.ca</saml2:AttributeValue>
</saml2:Attribute>
</saml2:AttributeStatement>
</saml2:Assertion>
</saml2p:Response>
Raw
web.log
web_1 | 2020-06-02T21:07:47.588975370Z 21:07:47 [INFO] sentry.superuser: superuser.logged-in (user_id=1 ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:47.589373072Z 21:07:47 [INFO] sentry.auth: user.auth.success (username=u'sentry@sfu.ca' organization_id=2L ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:47.590870634Z /usr/local/lib/python2.7/site-packages/sentry/utils/auth.py:142: RemovedInDjango21Warning: The host argument is deprecated, use allowed_hosts instead.
web_1 | 2020-06-02T21:07:47.590885286Z return is_safe_url(url, host=host)
web_1 | 2020-06-02T21:07:47.648116315Z 21:07:47 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:47.771016526Z 21:07:47 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/organizations/it-services/issues/' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.338323032Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/?detailed=0' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.395589363Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/?member=1' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.401914369Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/internal/health/' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.409020211Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/assistant/?v2' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.436632689Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/teams/' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.436652896Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/projects/?all_projects=1' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.509838619Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/broadcasts/' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.513969688Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/projects/?per_page=50' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.561134048Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/users/' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.566397860Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/tags/?statsPeriod=14d&use_cache=1' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.579355281Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/searches/?use_org_level=1' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.895920199Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/recent-searches/?query=&type=0&limit=3' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.900028542Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/processingissues/' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:48.940850629Z 21:07:48 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/issues/?limit=25&query=is%3Aunresolved&shortIdLookup=1&statsPeriod=14d' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:49.095865110Z 21:07:49 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/sent-first-event/?is_member=true' method=u'GET' ip_address=u'142.58.229.253')
web_1 | 2020-06-02T21:07:49.097588134Z 21:07:49 [INFO] sentry.superuser: superuser.request (user_id=1 url=u'http://sentry.its.sfu.ca/api/0/organizations/it-services/projects/?per_page=1' method=u'GET' ip_address=u'142.58.229.253')
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment