Wednesday, October 23, 2013

Decoding SAML Request/Response

You can use online decoder provided by ssocircle: https://idp.ssocircle.com/sso/toolbox/samlDecode.jsp
If sent as URL parameter the request/response must be decoded with the redirect option.
The actual algorithm for obtaing the encoded string is as follows:
  1. Gzip deflate the request/response if sent as query parameter (no change for POST parameters)
  2. Convert to Base64
  3. URL encode the result
Posted by at

1 comment :

  1. UnknownSeptember 7, 2016 at 6:54 PM

    I have made a site, where you can decode SAML and WS Federation messages: https://www.rcfed.com/ You can also extract certificate(s) from metadata file.

    ReplyDelete

Subscribe to: Post Comments ( Atom )