Base64 encode SAML Response problems?

[Cantor, Scott]

> It's hard to explain "Why?" I am doing what I am trying to do, but your guesses
> were somewhat close.  I do understand what you are saying, and I had
> suggested that if "they" wanted to do this, they should just go ahead and help
> our partner stand up an IDP on their end instead, but I was over-ridden and so,
> naturally, I got stuck with it :)...

You need to be much more vocal with them about how big a mistake this is. The chance of insecurity is extremely high. If it helps sell the argument, this is the primary author of the standard saying this. Don't do this. If you need a SAML proxy there are already free solutions for that that are well tested and maintained, like SimpleSAML.php and SATOSA.

-- Scott