Consume SAMLResponse Token

Question

SAML sp-based authentication has following short workflow.

• User wants to access application at sp.
• sp sends SAMLRequest token to idp.
• idp consume it and generate SAMLResponse token.
• idp sends this SAMLResponse token to AC-URL given by sp.

My Question is how sp consume this SAMLResponse token. What is the logic? If I can get some JAVA code help it will be beneficial.

Answer 1

Here is how I do it in Java. I use XMLBeans to parse the SAMLResponse, then decrypt it (if it's encrypted) and then verify the signature:

WebBrowserSSOAuthConsumerService