Encode/Decode AuthnRequest

Christopher Bongaarts cab at umn.edu
Thu Jul 18 17:18:47 EDT 2013


On 7/18/2013 4:06 PM, Jim Hoy wrote:
> When I try to decode the AuthnRequest that we are passing to an IDP, I 
> don't get anything usable.  I've tried GZip and .Net's  DeflateStream. 
>  Do I have the encoding and decoding process corrent?  What 
> compression does shib use?  Is the XML signed with a cert?

http://docs.oasis-open.org/security/saml/v2.0/saml-bindings-2.0-os.pdf

Section 3.4.4 details the message encoding used with the HTTP Redirect 
binding.  3.4.4.1 deals specifically with the Deflate compression.

I've not worked with OpenSAML at a low enough level to know where to 
direct you in the code.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130718/53e34252/attachment.html 


More information about the dev mailing list