Wednesday, March 28, 2012

Viewing SAMLResponse from OIF

I recently came across the need to view the SAMLResponse from an Identity Provider when using HTTP POST.

I used this URL Decoder and BASE64 Decoder: http://ostermiller.org/calc/encode.html

With Oracle Identity Federation (OIF) 11g, I copied the POST parameters from the Response using Live HTTP Headers.


I copied all POST Parameters (mine began with SAMLResponse=) into the textbox in the above link.

I clicked Decode next to URL.

I then deleted 'samlResponse=' from the beginning of the text and everything after and including 'relayState=' at the end of the text.

I then clicked Decode next to BASE64.

Then I am able to see the SAML Response. NOTE: Some of the data may be encrypted depending on how you've configured your Identity Provider.