Skip to content

Commit 9fc3088

Browse files
committed
Describe the main elements in the assertion
1 parent a70322c commit 9fc3088

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

_pages/saml/authentication.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -174,6 +174,14 @@ A proofed identity request at AAL2, with phishing resistent MFA, for email, phon
174174
<p markdown="1">After the user authenticates, Login.gov will redirect and POST a form back to your registered Assertion Consumer Service URL with a hidden form control named `SAMLResponse`.</p>
175175
<p markdown="1">`SAMLResponse` contains a base64-encoded XML payload that contains data that is encrypted with the service provider's public key.</p>
176176
<p markdown="1"> The decrypted `SAMLResponse` contains a `<saml:Assertion>` element, which in turn contains elements like `<saml:Subject>`, `<saml:AttributeStatement>` and `<saml:AuthnStatement>`. </p>
177+
<dl>
178+
<dt markdown="1">`Subject`</dt>
179+
<dd>Contains the NameID, the Recipient of this information and the validity period.</dd>
180+
<dt markdown="1">`AttributeStatement`</dt>
181+
<dd>All the requested attributes.</dd>
182+
<dt markdown="1">`AuthnStatement`</dt>
183+
<dd>Contains the AAL that was used.</dd>
184+
</dl>
177185
<p>For example, {{ decrypted_response | markdownify }}</p>
178186
<a href="{{ '/saml/logout/' | prepend: site.baseurl }}" class="usa-link margin-top-4 mobile:display-none desktop:display-block">Next step: Logout</a>
179187
</div>

0 commit comments

Comments
 (0)