Skip to content

Commit

Permalink
Describe the main elements in the assertion
Browse files Browse the repository at this point in the history
  • Loading branch information
vrajmohan committed Sep 20, 2024
1 parent a70322c commit 9fc3088
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions _pages/saml/authentication.md
Original file line number Diff line number Diff line change
Expand Up @@ -174,6 +174,14 @@ A proofed identity request at AAL2, with phishing resistent MFA, for email, phon
<p markdown="1">After the user authenticates, Login.gov will redirect and POST a form back to your registered Assertion Consumer Service URL with a hidden form control named `SAMLResponse`.</p>
<p markdown="1">`SAMLResponse` contains a base64-encoded XML payload that contains data that is encrypted with the service provider's public key.</p>
<p markdown="1"> The decrypted `SAMLResponse` contains a `<saml:Assertion>` element, which in turn contains elements like `<saml:Subject>`, `<saml:AttributeStatement>` and `<saml:AuthnStatement>`. </p>
<dl>
<dt markdown="1">`Subject`</dt>
<dd>Contains the NameID, the Recipient of this information and the validity period.</dd>
<dt markdown="1">`AttributeStatement`</dt>
<dd>All the requested attributes.</dd>
<dt markdown="1">`AuthnStatement`</dt>
<dd>Contains the AAL that was used.</dd>
</dl>
<p>For example, {{ decrypted_response | markdownify }}</p>
<a href="{{ '/saml/logout/' | prepend: site.baseurl }}" class="usa-link margin-top-4 mobile:display-none desktop:display-block">Next step: Logout</a>
</div>
Expand Down

0 comments on commit 9fc3088

Please sign in to comment.