Decrypting SAML assertion ad-hoc

[Kevin Foote]

On Jun 10, 2014, at 3:42 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 6/10/14, 6:39 PM, "Marek Denis" <marek.denis at gmail.com> wrote:
>> 
>> For some debugging purposes I would like to decrypt my SAML2 assertion
>> and be able to check some tags and its values. Is there any relatively
>> easy way to do that? I tried to raise the verbosity level in
>> /etc/shibboleth/shibd.logger but it didn't really help.
> 
> It is in fact logged in shibd.log.


Marek 
Uncomment these two lines in the shibd.logger config.. 

log4j.category.OpenSAML.MessageDecoder=DEBUG
log4j.category.OpenSAML.MessageEncoder=DEBUG

You’ll start to see lines like below … 

2014-06-10 15:56:19 DEBUG OpenSAML.MessageDecoder.SAML2POST [9]: validating input
2014-06-10 15:56:19 DEBUG OpenSAML.MessageDecoder.SAML2POST [9]: decoded SAML message:
<?xml version="1.0" encoding="UTF-8"?><saml2p:Response xmlns:saml2p=“urn:oasis:names:tc…  
….
…  big blob here … 
…. 


--------
thanks
 kevin.foote