API tools faq
paste
Guest User

WebEx Sample SAML Response

a guest
Jul 2nd, 2013
663
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
XML 6.70 KB | None | 0 0
raw download clone embed print report
  1. SAML 2.0 – Auto Account Creation
  2. Here is an example of a signed SAML response containing a SAML 2.0 assertion. This response includes mandatory and optional user profile attributes used for automatic account creation. Site specific options are highlighted in bold.
  3.  
  4. <Response xmlns="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://acme.webex.com/dispatcher/SAML2AuthService?siteurl=acme" ID="_06bff71973342ad24ba31790591bb010e963" InResponseTo="s250ce91cf92b24a7694686158ddea33b6c1ce7fa9" IssueInstant="2008-09-05T19:08:05Z" Version="2.0">
  5. <ns1:Issuer xmlns:ns1="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">acme</ns1:Issuer>
  6. <Status>
  7. <StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
  8. </Status>
  9. <ns2:Assertion xmlns:ns2="urn:oasis:names:tc:SAML:2.0:assertion" ID="_e72cfdeffbf9288cfa75e2423a932abb35d5" IssueInstant="2008-09-05T19:08:05Z" Version="2.0">
  10. <ns2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"> acme</ns2:Issuer>
  11. <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  12. <ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  13. <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
  14. <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
  15. <ds:Reference URI="#_e72cfdeffbf9288cfa75e2423a932abb35d5" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  16. <ds:Transforms xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  17. <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
  18. <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
  19. </ds:Transforms>
  20. <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
  21. <ds:DigestValue xmlns:ds="http://www.w3.org/2000/09/xmldsig#">p5AbejgL5K4nGDp3HXHfp3VPhmE=</ds:DigestValue>
  22. </ds:Reference>
  23. </ds:SignedInfo>
  24. <ds:SignatureValue xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  25. TtMcc6pnIxbDcLulI8/hJS9A74dR2w05dO676PK7KT48d8sGFoXXTgpWgy++7+AZTpQCjHPcv88c
  26. dAh4PtripoBlpZ++xErKQ/ee/rxsP2mOr7LrNE4QoqUbiOCd68kHz9Qjx0ApTIr6d4YXNfeHD62O
  27. iEBnixRE5c6hlnn263U=
  28. </ds:SignatureValue>
  29. <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  30. <ds:X509Data xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  31. <ds:X509Certificate xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  32. MIIErjCCA5agAwIBAgIQZMQJL9PYyWwQloty2TFcIzANBgkqhkiG9w0BAQUFADBrMQswCQYDVQQG
  33. EwJVUzEtMCsGA1UEChMkVHJ1c3RlZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MS0wKwYD
  34. VQQDEyRUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwHhcNMDgwNTE2MDAwMDAw
  35. WhcNMTAwNTE2MjM1OTU5WjCB/TELMAkGA1UEBhMCVVMxFDASBgNVBAgTC0NPTk5FQ1RJQ1VUMRIw
  36. EAYDVQQHEwlGQUlSRklFTEQxITAfBasdawerweasdmVyYWwgRWxlY3RyaWMgQ29tcGFueTEwMC4G
  37. A1UECxMnR0UgQ29ycG9yYXRlIENJUyhjb3JwdDUwOCBwb2xpY3lzZXJ2ZXIpMS0wKwYDVQQLEyRQ
  38. cm92aWRlZCBieSBHZW5lcmFsIEVsZWN0cmljIENvbXBhbnkxFzAVBgNVBAsTDkVudGVycHJpc2Ug
  39. U1NMMScwJQYDVQQDEx5mZWRlcmF0aW9uLnN0YWdlLmdlY29tcGFueS5jb20wgZ8wDQYJKoZIhvcN
  40. AQEBBQADgY0AMIGJAoGBALxifpE26Rq2/uu6aykFJs3FqVg8/jh+F52JFRFdqmE6X2BHwIvTyrAe
  41. Xxa3qCBrFuUkmuopAMB9Fa0EF/JRSTvCyrPbls2ad3f34fvfAsCspdorx4d/Bc57UiqBXD/MSRWD
  42. S4lIYu9z2HXP1VTmu8zn4pkGCKatwvzmyX8kHjQbAgMBAAGjggE9MIIBOTAfBgNVHSMEGDAWgBQx
  43. lflM+yx445/iHjtrODIv/ZeZ5jAdBgNVHQ4EFgQUWO9diqLaKUpW5v0i6jJvLck3z9owDgYDVR0P
  44. AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBEG
  45. CWCGSAGG+EIBAQQEAwIGwDCBpgYDVR0fBIGeMIGbMEugSaBHhkVodHRwOi8vY3JsLmNzY3RydXN0
  46. ZWRzZWN1cmUuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1dGhvcml0eS5jcmwwTKBKoEiG
  47. Rmh0dHA6Ly9jcmwyLmNzY3RydXN0ZWRzZWN1cmUuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0
  48. WebEx Federated SSO Authentication Service Page 11
  49. Cisco Systems Technical Overview
  50. ZUF1dGhvcml0eS5jcmwwDQYJKoZIhvcNAQEFBQADggEBAHj2uj/f18c7PhYBenQJPgIFd179gR3/
  51. Ac+fB4PEnkJnpA5bQmHM3S1C/yCI8HOfihlucw4ckZsYjcdd8PmbrrtMdTqz5LaBL9i3OVDgEd9h
  52. mvIw0obHA6TM+hhSCdhpFOkaWaeYjd8ueDkO2/rqu96gvL0uDKMjbrKIvowtW3y3UFKUcyRs3SdU
  53. YPh1mwGJZ+4eq8WaLA+zH1UX37Mu4ErW4YA7vJapNn4K/ODax85zc/Wu4Dq15pPwW4HQzhXEHCoc
  54. i2n/cUVgq/QH1TF5spK/JCNxBsvzFmxn+qrkq9k+cQsIZGyAKDiQzaFXNE44c6mNOqDRw0PkXPZz
  55. lGOyPDE=
  56. </ds:X509Certificate>
  57. </ds:X509Data>
  58. </ds:KeyInfo>
  59. </ds:Signature>
  60. <ns2:Subject>
  61. <ns2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">johnd</ns2:NameID>
  62. <ns2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
  63. <ns2:SubjectConfirmationData InResponseTo="s250ce91cf92b24a7694686158ddea33b6c1ce7fa9" NotOnOrAfter="2008-09-05T19:09:35Z" Recipient="https://acme.webex.com/dispatcher/SAML2AuthServlet?siteurl=acme"/>
  64. </ns2:SubjectConfirmation>
  65. </ns2:Subject>
  66. <ns2:Conditions NotBefore="2008-09-05T19:07:35Z" NotOnOrAfter="2008-09-05T19:09:35Z">
  67. <ns2:AudienceRestriction>
  68. <ns2:Audience>http://www.webex.com</ns2:Audience>
  69. </ns2:AudienceRestriction>
  70. <ns2:AudienceRestriction>
  71. <ns2:Audience>http://www.webex.com</ns2:Audience>
  72. </ns2:AudienceRestriction>
  73. </ns2:Conditions>
  74. <ns2:AuthnStatement AuthnInstant="2008-09-05T19:08:05Z" SessionIndex="VOZ+dlWSTR33dFexpmtMlIFti7M=KDtVbw==" SessionNotOnOrAfter="2008-09-05T19:09:35Z">
  75. <ns2:AuthnContext> <ns2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ns2:AuthnContextClassRef>
  76. </ns2:AuthnContext>
  77. </ns2:AuthnStatement>
  78. <ns2:AttributeStatement>
  79. <ns2:Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
  80. <ns2:AttributeValue>johnd</ns2:AttributeValue>
  81. </ns2:Attribute>
  82. <ns2:Attribute Name="firstname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
  83. <ns2:AttributeValue>John</ns2:AttributeValue>
  84. </ns2:Attribute>
  85. <ns2:Attribute Name="lastname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
  86. <ns2:AttributeValue>Doe</ns2:AttributeValue>
  87. </ns2:Attribute>
  88. <ns2:Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
  89. <ns2:AttributeValue>[email protected]</ns2:AttributeValue>
  90. </ns2:Attribute>
  91. <ns2:Attribute Name="optionalParams" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
  92. <ns2:AttributeValue>OPhoneCountry=1</ns2:AttributeValue>
  93. <ns2:AttributeValue>OPhoneArea=408</ns2:AttributeValue>
  94. <ns2:AttributeValue>OPhoneLocal=323.2345</ns2:AttributeValue>
  95. <ns2:AttributeValue>Address1=4610 Patrick Henry Dr.</ns2:AttributeValue>
  96. <ns2:AttributeValue>City=Santa Clara</ns2:AttributeValue>
  97. <ns2:AttributeValue>State=CA</ns2:AttributeValue>
  98. <ns2:AttributeValue>MT=<10,101,234,543></ns2:AttributeValue>
  99. <ns2:AttributeValue>TC1=Engineering</ns2:AttributeValue>
  100. <ns2:AttributeValue>TC2=8723</ns2:AttributeValue>
  101. </ns2:Attribute>
  102. </ns2:AttributeStatement>
  103. </ns2:Assertion>
  104. </Response>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!