SAML 2 Response Destination not properly URI encoded
Basics
Technical
Logistics
Basics
Technical
Logistics
Description
Environment
None
Activity
Stephen Ford
June 21, 2019 at 12:15 AM
That is awesome!!! Thank you very much.
Scott Cantor
June 20, 2019 at 11:28 PM
The raw data is here.
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 Ford
June 20, 2019 at 11:15 PM
I don't suppose you would be willing to share your SAML trace POST to the LinkedIn Servers. Nobody seems to be able to tell me what the problem is. I'm just a contractor on for 6 months and the LinkedIn guys can't seem to find a problem.
Scott Cantor
June 19, 2019 at 7:20 PM
Stephen Ford
June 19, 2019 at 7:16 PM
Well, I had hoped this would go a little smoother. Guess I am doing a deep dive on this. Are there any forums or slack channels for Shibboleth?
Thanks for your time.
Regards,
Stephen
In the SAML2 Response the destination uri is not properly encoded for xml and the parser from the sp throwing an exception. Is this a know issue or is there a configuration mechanism that I am missing.
Example
<saml2p:Response Destination="https://www.example.com/checkpoint/enterprise/saml/56190825?application=learning&appInstanceId=60907409&authModeId=6544322022275600385"
The first Ampersand is properly encoded, but the second one is not.