How SAML responses are parsed (not specific to Shib)

Nick Myers nick.myers at
Wed Aug 17 08:14:01 UTC 2022

Thank you for the pointer to the list Scott.

Definitely not planning to build one, want to understand it a lot more than
I do at the moment.


On Wed, 17 Aug 2022, 01:12 Cantor, Scott, <cantor.2 at> wrote:

> OASIS runs a list, saml-dev at, for SAML questions like
> this.
> The short answer is that it requires an XML parser to deal with SAML,
> which is a huge topic itself.
> You should under no circumstances whatsoever even consider building your
> own SAML implementation at this point. If you want a properly built one,
> there are 3 open source options in 3 different languages (Shibboleth being
> one), and if you want a bad one, there are lots to choose from, some free
> and some not.
> -- Scott
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list