Manually Generate a SAML Response

[Michael Dahlberg]

I have what I think is a unique problem.  I'm working with a SP that wants
to validate our IdP.  In so doing, they want us to POST a web document to
their test site which contains three fields: a base64 encoded SAML2
response, the base64 encoded version of our Shibboleth X509 cert, and our
entityId.

Normally, if I wanted the SAML2 response that is redirected to the SP, I'd
just look in the debug logs for that particular SP after a
failed/successful login attempt.  Unfortunately, this requires that I
submit the request (using an unsolicited login through our IdP).  By
actually submitting the request to their test site using this POST
proceedure, the SubjectConfirmation needs to be valid, the time parameters
need to be valid, the Reference needs to be valid (which I assume means I
can't resubmit the request that I used to originally create the SAML2
response).

So, is there a way that I can manually generate a SAML2 response outside of
a normal web login attempt, that I can then base64 encode and submit by
POSTing it to their test site?

Thanks,
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170620/bd43eb23/attachment.html>