<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>All,</p>
<p><br>
</p>
<p>I have finally gotten a Status of success after I log in using myself user. I am writing a node.js SP that works with Shibboleth IdP. Below is the response I receive. I am unsure how to decrypt the EncryptedAssertion, Seems Like I have a x509 certificate,
and some information about the Encrypted Key but I am unsure what the encryptedKey is, how do I get / configure the EncryptedKey? I see nothing in my metadata file I uploaded to testShib.org. </p>
<p><br>
</p>
<p>Thanks,</p>
<p><br>
</p>
<p>Truby Voglund</p>
<p><br>
</p>
<p><?xml version="1.0" encoding="UTF-8"?><br>
<saml2p:Response xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="http://tuadevshibbolet.cloudapp.net/_saml/validate/shibboleth-idp/1ed79ec15dfd" ID="_cc247a0190fe32c81afeb30d01b42b85" InResponseTo="1ed79ec15dfd" IssueInstant="2015-07-14T03:05:29.817Z"
Version="2.0"><br>
<saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://idp.testshib.org/idp/shibboleth</saml2:Issuer><br>
<saml2p:Status><saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></saml2p:Status><br>
<saml2:EncryptedAssertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><br>
<xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="_95b8d75f45c4b0e127c138bd72f44b11" Type="http://www.w3.org/2001/04/xmlenc#Element"><br>
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"/><br>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><xenc:EncryptedKey Id="_3f236b9c2ff75529b8ad1eea26481e62" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><br>
<xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><br>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><br>
</xenc:EncryptionMethod><br>
<ds:KeyInfo><br>
<ds:X509Data><br>
<ds:X509Certificate>myCERTIFICATE</ds:X509Certificate><br>
</ds:X509Data><br>
</ds:KeyInfo><br>
<xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><br>
<xenc:CipherValue></xenc:CipherValue>SOMECIPHERVALUEFORKEY?<br>
</xenc:CipherData><br>
</xenc:EncryptedKey><br>
</ds:KeyInfo><br>
<xenc:CipherData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"><br>
<xenc:CipherValue>SOMECIPHERVALUEFORRESPONSE<br>
</xenc:CipherValue><br>
</xenc:CipherData><br>
</xenc:EncryptedData><br>
</saml2:EncryptedAssertion><br>
</saml2p:Response><br>
</p>
<p><br>
</p>
<p><br>
</p>
</div>
</body>
</html>