OpenSAML user discussion

["Richard Gundersen" <>]

Hi

I've been having fun getting to grips with SAML and conceptually it seems 
great - I think I might even be able to ditch Kerberos (!!)

However, I've come up against my first stumbling block and was wondering if 
somebody could give me a nudge in the right direction. Basically, I generate 
my first response, encode it to base64 using the method in the POSTProfile 
class, and the relying site cannot decode it. I've done a couple of tests 
and what follows is the plain text version of the response, followed by what 
toBase64() returns, and finally the base64 encoding that I *believe* is 
correct (this is just encoded using an online converter I found)

Is there something obvious anybody more familiar with SAML could point out 
to me? Really appreciate it if you can!

Regards

Richard (PS response is below:)


## Plain Text ##
<Response xmlns="urn:oasis:names:tc:SAML:1.0:protocol" 
xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" 
xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" 
IssueInstant="2004-05-03T21:33:38Z" MajorVersion="1" MinorVersion="1" 
Recipient="http://localhost:8080/acme/main.jsp"; 
ResponseID="b588975ce9300181081b636a96e98eaf"><Status><StatusCode 
Value="samlp:Success"></StatusCode></Status><Assertion 
xmlns="urn:oasis:names:tc:SAML:1.0:assertion" 
AssertionID="c043ca81f795223b6d6be47778f1bd95" 
IssueInstant="2004-05-03T21:33:38Z" 
Issuer="http://localhost:8080/acme/main.jsp"; MajorVersion="1" 
MinorVersion="1"><Conditions NotBefore="2004-05-03T21:33:38Z" 
NotOnOrAfter="2004-05-03T21:38:38Z"><AudienceRestrictionCondition><Audience>http://localhost:8080/acme/main.jsp</Audience></AudienceRestrictionCondition></Conditions><AuthenticationStatement 
AuthenticationInstant="2004-05-03T21:33:38Z" 
AuthenticationMethod="foo"><Subject><SubjectConfirmation><ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:bearer</ConfirmationMethod></SubjectConfirmation></Subject><SubjectLocality 
IPAddress="127.0.0.1"></SubjectLocality></AuthenticationStatement></Assertion></Response>

## Result of POSTProfile.toBase64() ##
[B@14b2f1a

## Result of base64 encoding according to an online encoder I found ##
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

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today! 
http://www.msn.co.uk/messenger