Wrappedinsane

IdP — Signed SAML Response

Issued for user@example.com

Raw XML

<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><saml:Assertion ID="a1"><saml:Subject><saml:NameID>user@example.com</saml:NameID></saml:Subject><saml:Conditions><saml:AudienceRestriction><saml:Audience>https://ctf.example.com</saml:Audience></saml:AudienceRestriction></saml:Conditions><ds:Signature><ds:SignedInfo><ds:Reference URI="#a1"/></ds:SignedInfo><ds:SignatureValue>62449634522f5bd7e9a303a4d860277bbaaea0d6cceb3eb188f05805c6b2ab24</ds:SignatureValue></ds:Signature></saml:Assertion></samlp:Response>

Encoded (base64+zlib)

eJx9UslugzAU/JWI3LFjlhAroEbNBantIVF79/JIXYGNsBH5/Joo0CxSjzNvludla1lTt/QAtjXawuLc1NrSC5kHfaepYVZZqlkDljpBj7v3N0pCTNvOOCNMHdxY/ncwa6FzyujJIm0efDvXUoSGYQiHKDTdCRGMMcIb5DXSqtMyKLZjNt1N9kW5zwO2mvhjz39AuCv68LXlvui99gXOrGlrCIVptuh2ekX3zlejpRrz7VTYSwVagL8b1ykxjh4mxbi99esLV4XPbbPsAd8FoqdyaelRnTRzfQczAlnqylzgASroxpzF56HMg6W/CuRznoVzyhereyhSEsebNIoTQqqEyzVsWIQjFsssxWS95pwxYFimQgCPgK+yrMJJhhORcsI4ieeKm8x7bj7o9FRX4u9/Fb/9R9os

This is the value that would be posted to the SP's /acs endpoint.

Submit to /acs (unmodified)

Submit tampered response