Subject missing from Response

[Nate Klingenstein]

Tommy,

There is probably a subject in the encrypted payload.  If the subject were outside the encryption, it would mostly defeat the purpose of the encryption.  Obviously, I can’t decrypt it to be totally sure.

You can’t see it in your web browser by design.  That’s one of the benefits of encrypting this payload rather than just using TLS for each leg of the transaction.  You will need the SP’s private key to decrypt the payload.

You can either turn off encryption, or you can look at the contents before the IdP encrypts them(will need to turn up logging) or after the SP decrypts them.

Hope this helps,
Nate.