<div dir="ltr">You can view the assertion just prior to encryption in the IdP logs:<div>
<p class=""><span class="">DEBUG [edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:279] - Assertion to be encrypted is:</span></p><p class=""><span class="">...</span></p><p class=""><span class=""><!-- To get the SAML assertion in the idp-process log, include this logger</span> in logging.xml:</p><p class=""><span class=""> with level at DEBUG --></span></p><p class=""><span class=""> <logger name="edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler"></span></p><p class=""><span class=""> <level value="DEBUG" /></span></p><p class="">
</p><p class=""><span class=""> </logger></span></p><p class="">David Bantz</p><p class="">UAlaska IAM</p></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 10, 2014 at 8:09 AM, samir el otmani <span dir="ltr"><<a href="mailto:elotmani.samir@gmail.com" target="_blank">elotmani.samir@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi all ,<div><br></div><div>I want to display the SAML2 response from an IDP for debugging purpose , i think the IDP encode all attributes, i use SAML tracer in firefox , and it shows a encrypted tags in SAML which is normal because idp encrypt it , so how can i see a pure SAML2 response before encryption .</div><div>other question : is it normal if an IDP sends a non encrypted SAML2 response; in another words is there any configuration in idp which indicate that the SAML2 attributes will not be encrypted .</div><div><br></div><div>thank you<span class="HOEnZb"><font color="#888888"><br>-- <br><div><div dir="ltr"><i><font color="#0b5394" face="verdana, sans-serif"><b>EL OTMANI Samir</b></font></i><div><i><font color="#0b5394" face="verdana, sans-serif"><b>Ingénieur d'Etat en Génie Informatique </b></font></i></div><div><i><font color="#0b5394" face="verdana, sans-serif"><b>Tel:+212 699 041 864</b></font></i></div></div></div>
</font></span></div></div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div>