Re: [saml-dev] Trying to Decrypt my EncryptedAssertion

["Cantor, Scott" <cantor.2@osu.edu>]

On 7/14/15, 3:12 PM, "Truby Voglund" <tvoglund@mocodevco.com> wrote:

>I am new to saml and have a lot working so far.  I get a SSO redirect post back to my application, and now need to Decrypt my EncryptedAssertion.  But I am unsure of the details of the response.  I have a Certificate x509 and my private key, but no passphrase.
>  What is the correct way to decrypt the following response?

The only thing SAML defines is the basic layout in the message that people need to support when they implement XML Encryption to limit some of the features needed. That's in the Core specification in the section on use of XML Encryption.

The rest of what you're asking is covered by the XML Encryption specification [1]. If you don't have a library to do that for you, you're talking about a lot of work. That's not a casual project.

-- Scott

[1] http://www.w3.org/TR/xmlenc-core1/