Attachment 10467 Details for Bug 51932

saml message working login

s1 (text/plain), 8.07 KB, created by Jürn Brodersen on 2020-08-31 12:02 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: Jürn Brodersen

Created: 2020-08-31 12:02 CEST

Size: 8.07 KB

patch

obsolete

><samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_bd9bfbe1ee01c0ea6924f6917bce7b8e13f2f8b24d" Version="2.0" IssueInstant="2020-08-31T09:55:34Z" Destination="https://ucs-8750.univention.intranet/univention/saml/" InResponseTo="id-mXtCwVmRTovpTvq7y"><saml:Issuer>https://ucs-sso.univention.intranet/simplesamlphp/saml2/idp/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
>  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
>    <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
>  <ds:Reference URI="#_bd9bfbe1ee01c0ea6924f6917bce7b8e13f2f8b24d"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>2MDvlW2J80GR5UPGwZIK/tvTyYTKSETXnMH25dC46Pw=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>QMGnHHxQ9K+OLrSoaOjL0dUNKe4Kijak7pvNAB/R4WDIQU9wxioq/o3GovfmDcKg2/af9k7WFPREAogvP8/dSirHdZfs4nuofgP7eoWYDKX54pVwEqs1Xg8tGxQlH7iDdcyGM8Bjx+6Ci3C/aRnzEu9vmWGB4t2LTcqPNyuoPL0xe+lXuVG2hNfrvl0JeXhx7MxQABjSiV9kkhhFOGtvQPFdKZmSaXNhUTeRavDFROZiePs0xjpHzlkfa8cB7BDsB24vNch6p7Y18kx8OFB0kuKFik5zI87vHlZBhn9CjTP93t0uayQtMjKawGY6WP/A0VF0oG6TpMAB8Zhl99ZKRg==</ds:SignatureValue>
><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/></samlp:Status><saml:Assertion xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" ID="_9f4c38196a394d8384ed2ab64c1cdf11854f403dd3" Version="2.0" IssueInstant="2020-08-31T09:55:34Z"><saml:Issuer>https://ucs-sso.univention.intranet/simplesamlphp/saml2/idp/metadata.php</saml:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
>  <ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
>    <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
>  <ds:Reference URI="#_9f4c38196a394d8384ed2ab64c1cdf11854f403dd3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>eOzh1aJK1PxMH39YqON8VOxnhKeupMJdhfmVyL3p39I=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>lvXYj1yFIujr29Umfv/+m3Lpbkbw0NNOxttuRlvpBuDAhaZQ0c8SytsbcSzfghEpWk88NItSF8ykTjext2lgXbQiwR1ETFv6subU+TQxRTZyh7qG+bw3BLcsGRfkex9clPxqbX/optxbJ8y8gXIxVNRjvv8YelEEvLS7DNfDujFHzohhz+pS7E2xJgTeGpWbXI7WWt9xrlDU/4MOE7tMF40txAXsaQ9jzVOjhFWCOLUdRjn6/Y8YBNQCQfQb3kJ8X+rzgHcykItAnA40UEgaOaHh2kusUsssxG/JtWDsB3lrGyEs813cruPJnHpWt3FsFZ+0N04lYgtqG19LlUtEvQ==</ds:SignatureValue>
><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml:Subject><saml:NameID SPNameQualifier="https://ucs-8750.univention.intranet/univention/saml/metadata" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient">_6105ed609f79a0c98494974f232ab28e727b4a8861</saml:NameID><saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"><saml:SubjectConfirmationData NotOnOrAfter="2020-08-31T10:00:34Z" Recipient="https://ucs-8750.univention.intranet/univention/saml/" InResponseTo="id-mXtCwVmRTovpTvq7y"/></saml:SubjectConfirmation></saml:Subject><saml:Conditions NotBefore="2020-08-31T09:55:04Z" NotOnOrAfter="2020-08-31T10:00:34Z"><saml:AudienceRestriction><saml:Audience>https://ucs-8750.univention.intranet/univention/saml/metadata</saml:Audience></saml:AudienceRestriction></saml:Conditions><saml:AuthnStatement AuthnInstant="2020-08-31T09:55:34Z" SessionNotOnOrAfter="2020-08-31T21:55:34Z" SessionIndex="_09999cc0ad8237167675d57121126c2f4bfb881fa1"><saml:AuthnContext><saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</saml:AuthnContextClassRef></saml:AuthnContext></saml:AuthnStatement><saml:AttributeStatement><saml:Attribute Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue xsi:type="xs:string">Administrator</saml:AttributeValue></saml:Attribute></saml:AttributeStatement></saml:Assertion></samlp:Response>

Actions: View

Attachments on bug 51932: 10467 | 10468 | 10469 | 10624 | 10625