Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Consume SAMLResponse Token

SAML sp-based authentication has following short workflow.

  • User wants to access application at sp.
  • sp sends SAMLRequest token to idp.
  • idp consume it and generate SAMLResponse token.
  • idp sends this SAMLResponse token to AC-URL given by sp.

My Question is how sp consume this SAMLResponse token. What is the logic? If I can get some JAVA code help it will be beneficial.

like image 594
Muhammad Imran Tariq Avatar asked Jul 13 '11 15:07

Muhammad Imran Tariq


People also ask

How do I use SAML response?

User is redirected to the login page. User enters credentials which are posted to our server-side identity provider. If the user is authenticated, the identity provider returns a SAML response to the client. Client posts the SAML response to the service provider.


1 Answers

Here is how I do it in Java. I use XMLBeans to parse the SAMLResponse, then decrypt it (if it's encrypted) and then verify the signature:

WebBrowserSSOAuthConsumerService

like image 84
codebrane Avatar answered Oct 22 '22 00:10

codebrane