URL encoding requirements

[Enrico Cavalli <enrico.cavalli@gmail.com>]

Hello, sorry for the (maybe) stupid question, but I do not understand if the SAML specifications
allow a GET request without URL encoding.

I'm getting logout requests from a SAML sevice provider as reported below

GET https://idp.iulm.it/simplesaml/saml2/idp/SingleLogoutService.php?SAMLResponse=jZJda8IwFIbv9ytK7m2T9NNgK2MyENzN6rzYzYjpqQbapPSksp+/VieTMWSXIe/HOU+yWH62jXeCHrU1OWE+JR4YZSttDjl52z7PMrIsHhYo24Z3YmMPdnCvgJ01CN4K0Gkj3dl7dK5DEQS66nw9NK2vXYC67RqYzME5YboMyjG7gUtUCf1JK/C7Y0e89SonH8DrbC8pC2kcAYOU80jxMJ5Xas/qhGWjzFwH2NrREIcg04orliRRyOtK8VTKqp7zKGNhLSlVWZpmCY3G1daIA6wNOmlcTjhl2YyyGUu2jIswEjT151n8TrzdFQifgIyIDIoLgpwMvRFWokZhZAsonBLl48tGjFLR9dZZZRtSXIiJc2F/m3A/QCJCP/Ekxb95tuBkJZ2cIC6C297i+m6lk27AX8cnW4G3k80A92fCs1qUg1KASILiu+QnNvjzexRf HTTP/1.1

Host: idp.iulm.it

Is it a correct SAML request ?

If decoded and deflated it translates to a valid XML request, but I suppose it cannot work if not URL encoded.

Thank you for your time.

Best regards,

Enrico.

--

Enrico Cavalli

skype: enricocavalli
PGP Fingerprint: 3762 7B1B 743E 029C 8F94  8ADE BC4B 43A7 0485 30E5