SAML response and XML encoding

Peter Schober peter.schober at univie.ac.at
Tue Aug 29 12:10:39 UTC 2023


* magnus ardstrom via users <users at shibboleth.net> [2023-08-29 13:41]:
> We have an issue where Shibboleth IDP is XML-encoding the complete SAML
> response.
> 
> Unfortunately our SP can not decode the XML, and in our case the RelayState
> value is malformed.

"the complete SAML response" would have to include much more than the
RelayState value, though -- the Reponse would also contain the
Assertion and encoding the XML would break everything. Which is
doubtful would happen only to you and not affect anyone else, ever.

> In the request the relaystate is "MA==" but the response is "MA&#x3d;&#x3d"

So does this affect only the RelayState value or "the complete SAML response"
How (i.e., using what protocol binding) is the AuthnRequest and
therefore the RelayState being transmitted to the IDP? HTTP-POST?
HTTP-Redirect?
How did you determine what the value was in in the Request?
-peter


More information about the users mailing list