Test Posting an Authenticated SAML Response to My SP

[Cantor, Scott]

On 3/26/15, 2:40 PM, "Mark Neidig" <mneidig at ftni.com> wrote:

>Before I ask about the error, I ask for feedback on ways to test posting of an authenticated SAML Response to my SP. I have tested using www.testshib.org, but I want to test my actual shibboleth2.xml configuration, not a configuration staged for testshib.

The only practical way to test an SP is with an IdP, really. Anything you do short of that is just going to have to emulate one.

> 
>Expected results: a display of my site’s destination for authenticated SSO.

No, the expected result would be that the signature isn't valid anymore. There's no way any of that would work.

>h.     Actual results: the error message “Unable to decode base64 in POST binding message.”

That just means the message is more fundamentally invalid, but fixing that isn't going to get you anywhere. If it did, you should be seriously concerned.

-- Scott