How can I see my SAML assertion when using Component Space

Question

I am using Component Space SAML 2.0 library to send an Single Sign On assertion to a partner site. They claim I am not sending my SAML assertion correctly. The library is high level so there's not much area for me to be messing it up, but I don't know how to see the message before i send it.

I would like to use the debugger (VS) or output the SAML XML token to the screen when I click a link on my page. Does anyone know how I can do this?

Are you doing this from a browser? – rbrayb Aug 17 '14 at 21:51 — rbrayb, Aug 17 '14 at 21:51

score 3 · Answer 1 · answered Aug 18 '14 at 14:19

3

Not sure how to capture it before you send it with your code/library... However...

Once it's "in" your browser... You can use TamperData, SAMLTracer, or the Developer tools in Firefox, the developer tools in Chrome, or a "proxy" like Fiddler or Charles. All of those will let you capture the encoded assertion.

Then, you can decode it using this handy online tool. That will show you your assertion. SamlTracer will "decode" it automatically, IIRC.

answered Aug 18 '14 at 14:19

Andrew K.

3,240
12
23

Interestingly, I could figure out how to decode a SAMLRequest using C#, it ended up with all kinds of odd characters in it. I tried an online tool and it looked the same. But the one linked-to above works. – Luke Puplett Apr 30 '15 at 13:24
Did you BASE64 decode it and INFLATE, or vice versa? – Andrew K. Apr 30 '15 at 16:59
Ah, maybe its the INFLATE. I didn't do that at all :) – Luke Puplett May 04 '15 at 18:22

score 0 · Answer 2 · answered Sep 21 '14 at 02:15

The solution was to turn on debugging in the web config file. This gave me a SAML assertion with comments that I could read.

Also using fiddler to look for the post worked as well. This gave me a encoded assertion that i could decode to see exactly what was being sent

How can I see my SAML assertion when using Component Space

2 Answers2