I don't get this case of SAML requestValidating a SAML token at WCF Data Service levelIdp-Initiated SSO | Validated by salesforceWCF SAML 1.1 Client IssueAre SAML tokens cache/stored anywhere on the browser?Create SAML response based on SAML requestSAML Response authenticationPerforming http web request to a server requiring SAML authenticationUsing SAML and https or httpWhat is exactly RelayState parameter used in SSO (Ex. SAML)?How to get SAML Response from SAML Request?
Why do aircraft leave cruising altitude long before landing just to circle?
Why don't modern jet engines use forced exhaust mixing?
Is there a commercial liquid with refractive index greater than n=2?
Have made several mistakes during the course of my PhD. Can't help but feel resentment. Can I get some advice about how to move forward?
Installing the original OS X version onto a Mac?
Can 'in-' mean both 'in' and 'no'?
Installing certbot - error - "nothing provides pyparsing"
Build a mob of suspiciously happy lenny faces ( ͡° ͜ʖ ͡°)
Postdoc interview - somewhat positive reply but no news?
Did Michelle Obama have a staff of 23 people, while Melania has a staff of 4?
What allows us to use imaginary numbers?
What security risks does exposing the size of the plaintext entail?
What should I do with the stock I own if I anticipate there will be a recession?
How to detect a failed AES256 decryption programmatically?
Virtual destructor moves object out of rodata section
How can I train a replacement without them knowing?
Radix2 Fast Fourier Transform implemented in C++
Did they show Truman doing private things (toilet, etc) when filming him for 24 hours, 7 days a week?
Does git delete empty folders?
Can I check a small array of bools in one go?
Check disk usage of files returned with spaces
When does The Truman Show take place?
Do predators tend to have vertical slit pupils versus horizontal for prey animals?
Meaning and structure of headline "Hair it is: A List of ..."
I don't get this case of SAML request
Validating a SAML token at WCF Data Service levelIdp-Initiated SSO | Validated by salesforceWCF SAML 1.1 Client IssueAre SAML tokens cache/stored anywhere on the browser?Create SAML response based on SAML requestSAML Response authenticationPerforming http web request to a server requiring SAML authenticationUsing SAML and https or httpWhat is exactly RelayState parameter used in SSO (Ex. SAML)?How to get SAML Response from SAML Request?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
At my job, there's a SAML authenticator provider. Just by curiosity I openned the devTools of my browser to follow the saml sequence during the authentication periode. Was expecting something like :
- The server send me a SAML Request and is certificate.
- My browser ask me what certificate he should use to authenticate me.
- My browser send informations to server.
- Server recognize me and sent me a token to allow the access of service.
But The truth is slighty different of what I expected. In fact according to my web browser :
The server redirect me to the SAML authentication server with a GET request containing some arguments :
SAML Before cert selectedMy browser ask me what certificate he should use.
My browser change header of my the request above and got a response from server and the server redirect me to my service. I'm now identified :
SAML After cert selected
So here come some questions :
- 1 : How the server autenticate me without receive information about me ?
- 2 : What my browser did with the certificate he select ?
- 3 : what's is the SAMLRequest and RelayState args ?
- 4 : Why before selecting any certificate my request have a "provisional headers" then he get a token before getting any response ?
hope you guys could response to my questions.
Thanks in advance,
Best regard
saml
asked Mar 27 at 13:57
XemuthXemuth
331 silver badge5 bronze badges
add a comment |
At my job, there's a SAML authenticator provider. Just by curiosity I openned the devTools of my browser to follow the saml sequence during the authentication periode. Was expecting something like :
- The server send me a SAML Request and is certificate.
- My browser ask me what certificate he should use to authenticate me.
- My browser send informations to server.
- Server recognize me and sent me a token to allow the access of service.
But The truth is slighty different of what I expected. In fact according to my web browser :
The server redirect me to the SAML authentication server with a GET request containing some arguments :
SAML Before cert selectedMy browser ask me what certificate he should use.
My browser change header of my the request above and got a response from server and the server redirect me to my service. I'm now identified :
SAML After cert selected
So here come some questions :
- 1 : How the server autenticate me without receive information about me ?
- 2 : What my browser did with the certificate he select ?
- 3 : what's is the SAMLRequest and RelayState args ?
- 4 : Why before selecting any certificate my request have a "provisional headers" then he get a token before getting any response ?
hope you guys could response to my questions.
Thanks in advance,
Best regard
saml
asked Mar 27 at 13:57
XemuthXemuth
331 silver badge5 bronze badges
add a comment |
At my job, there's a SAML authenticator provider. Just by curiosity I openned the devTools of my browser to follow the saml sequence during the authentication periode. Was expecting something like :
- The server send me a SAML Request and is certificate.
- My browser ask me what certificate he should use to authenticate me.
- My browser send informations to server.
- Server recognize me and sent me a token to allow the access of service.
But The truth is slighty different of what I expected. In fact according to my web browser :
The server redirect me to the SAML authentication server with a GET request containing some arguments :
SAML Before cert selectedMy browser ask me what certificate he should use.
My browser change header of my the request above and got a response from server and the server redirect me to my service. I'm now identified :
SAML After cert selected
So here come some questions :
- 1 : How the server autenticate me without receive information about me ?
- 2 : What my browser did with the certificate he select ?
- 3 : what's is the SAMLRequest and RelayState args ?
- 4 : Why before selecting any certificate my request have a "provisional headers" then he get a token before getting any response ?
hope you guys could response to my questions.
Thanks in advance,
Best regard
saml
asked Mar 27 at 13:57
XemuthXemuth
331 silver badge5 bronze badges
At my job, there's a SAML authenticator provider. Just by curiosity I openned the devTools of my browser to follow the saml sequence during the authentication periode. Was expecting something like :
- The server send me a SAML Request and is certificate.
- My browser ask me what certificate he should use to authenticate me.
- My browser send informations to server.
- Server recognize me and sent me a token to allow the access of service.
But The truth is slighty different of what I expected. In fact according to my web browser :
The server redirect me to the SAML authentication server with a GET request containing some arguments :
SAML Before cert selectedMy browser ask me what certificate he should use.
My browser change header of my the request above and got a response from server and the server redirect me to my service. I'm now identified :
SAML After cert selected
So here come some questions :
- 1 : How the server autenticate me without receive information about me ?
- 2 : What my browser did with the certificate he select ?
- 3 : what's is the SAMLRequest and RelayState args ?
- 4 : Why before selecting any certificate my request have a "provisional headers" then he get a token before getting any response ?
hope you guys could response to my questions.
Thanks in advance,
Best regard
saml
saml
asked Mar 27 at 13:57
XemuthXemuth
331 silver badge5 bronze badges
asked Mar 27 at 13:57
XemuthXemuth
331 silver badge5 bronze badges
asked Mar 27 at 13:57
XemuthXemuth
331 silver badge5 bronze badges
asked Mar 27 at 13:57
XemuthXemuth
331 silver badge5 bronze badges
asked Mar 27 at 13:57
XemuthXemuth
331 silver badge5 bronze badges
331 silver badge5 bronze badges
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
In general, in case of SAML the IdP sends an assertion about the authenticated user to the SP.
How the actual authentication happens at the IdP happens is out of scope.
about 1/2: When you accessed the IdP, it might be configured to use 'TLS client auth' to perform 'auto-login'. As your browser participated in 'TLS client auth', the IdP knows about you (or better about the certificate presented).
about 3: SAMLRequest request parameter is the deflate encoded SAML AuthnRequest as HTTP redirect binding is used ... please check SAMLv2 spec. RelayState request parameter holds the target URL the SP will redirect to after successful 'SP-initaited SSO' flow.
answered Mar 27 at 15:48
Bernhard ThalmayrBernhard Thalmayr
1,7761 gold badge7 silver badges7 bronze badges
Thanks ! it help me a lot
– Xemuth
Mar 28 at 7:59
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55379024%2fi-dont-get-this-case-of-saml-request%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
In general, in case of SAML the IdP sends an assertion about the authenticated user to the SP.
How the actual authentication happens at the IdP happens is out of scope.
about 1/2: When you accessed the IdP, it might be configured to use 'TLS client auth' to perform 'auto-login'. As your browser participated in 'TLS client auth', the IdP knows about you (or better about the certificate presented).
about 3: SAMLRequest request parameter is the deflate encoded SAML AuthnRequest as HTTP redirect binding is used ... please check SAMLv2 spec. RelayState request parameter holds the target URL the SP will redirect to after successful 'SP-initaited SSO' flow.
answered Mar 27 at 15:48
Bernhard ThalmayrBernhard Thalmayr
1,7761 gold badge7 silver badges7 bronze badges
Thanks ! it help me a lot
– Xemuth
Mar 28 at 7:59
add a comment |
In general, in case of SAML the IdP sends an assertion about the authenticated user to the SP.
How the actual authentication happens at the IdP happens is out of scope.
about 1/2: When you accessed the IdP, it might be configured to use 'TLS client auth' to perform 'auto-login'. As your browser participated in 'TLS client auth', the IdP knows about you (or better about the certificate presented).
about 3: SAMLRequest request parameter is the deflate encoded SAML AuthnRequest as HTTP redirect binding is used ... please check SAMLv2 spec. RelayState request parameter holds the target URL the SP will redirect to after successful 'SP-initaited SSO' flow.
answered Mar 27 at 15:48
Bernhard ThalmayrBernhard Thalmayr
1,7761 gold badge7 silver badges7 bronze badges
Thanks ! it help me a lot
– Xemuth
Mar 28 at 7:59
add a comment |
In general, in case of SAML the IdP sends an assertion about the authenticated user to the SP.
How the actual authentication happens at the IdP happens is out of scope.
about 1/2: When you accessed the IdP, it might be configured to use 'TLS client auth' to perform 'auto-login'. As your browser participated in 'TLS client auth', the IdP knows about you (or better about the certificate presented).
about 3: SAMLRequest request parameter is the deflate encoded SAML AuthnRequest as HTTP redirect binding is used ... please check SAMLv2 spec. RelayState request parameter holds the target URL the SP will redirect to after successful 'SP-initaited SSO' flow.
answered Mar 27 at 15:48
Bernhard ThalmayrBernhard Thalmayr
1,7761 gold badge7 silver badges7 bronze badges
In general, in case of SAML the IdP sends an assertion about the authenticated user to the SP.
How the actual authentication happens at the IdP happens is out of scope.
about 1/2: When you accessed the IdP, it might be configured to use 'TLS client auth' to perform 'auto-login'. As your browser participated in 'TLS client auth', the IdP knows about you (or better about the certificate presented).
about 3: SAMLRequest request parameter is the deflate encoded SAML AuthnRequest as HTTP redirect binding is used ... please check SAMLv2 spec. RelayState request parameter holds the target URL the SP will redirect to after successful 'SP-initaited SSO' flow.
answered Mar 27 at 15:48
Bernhard ThalmayrBernhard Thalmayr
1,7761 gold badge7 silver badges7 bronze badges
answered Mar 27 at 15:48
Bernhard ThalmayrBernhard Thalmayr
1,7761 gold badge7 silver badges7 bronze badges
answered Mar 27 at 15:48
Bernhard ThalmayrBernhard Thalmayr
1,7761 gold badge7 silver badges7 bronze badges
answered Mar 27 at 15:48
Bernhard ThalmayrBernhard Thalmayr
1,7761 gold badge7 silver badges7 bronze badges
1,7761 gold badge7 silver badges7 bronze badges
Thanks ! it help me a lot
– Xemuth
Mar 28 at 7:59
add a comment |
Thanks ! it help me a lot
– Xemuth
Mar 28 at 7:59
Thanks ! it help me a lot
– Xemuth
Mar 28 at 7:59
Thanks ! it help me a lot
– Xemuth
Mar 28 at 7:59
add a comment |
Got a question that you can’t ask on public Stack Overflow? Learn more about sharing private information with Stack Overflow for Teams.
Got a question that you can’t ask on public Stack Overflow? Learn more about sharing private information with Stack Overflow for Teams.
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55379024%2fi-dont-get-this-case-of-saml-request%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
