Disable assertion encryption

[Mak, Steve]

What I posted below is an unencrypted base64 deflated version of my SAML response. It's typical to send large bodies of content in base64 (deflated or undeflated) to save some space when no human needs to read it.

It looks like some encrypted message to the untrained eye.

Try installing an add-on such as Firefox's SAML tracer, and you should see SAML messages in the list.

Click on the "parameters" tab and it will show you the base64 encoding of the raw message.

Then just click the "SAML" tab and you should be able to verify if any part of the response is REALLY encrypted.

If you can read the SAML assertion and the attributes clearly, then it's not encrypted.

- Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200925/b16d5da9/attachment.htm>