samlopenam

How OpenAM verify SAML response coming from IDP

is OpenAM depends on the public key of the registered IDP to versify the SAML response

or depends also on the hashing algorithm in the SAML response from IDP like Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"

Note OpenAM version :13.0.0

Solution

  • OpenAM, acting as SAML SP, uses the public key enclosed in the KeyInfo element of the IdP meta data to verify the signature of the SAML response. It uses the signature algorithm chosen by the IdP, however it must be a supported signature algorithm.