Skip to content

Commit a70322c

Browse files
vrajmohanvrajmohan
committed
Use markdown attribute inside HTML
1 parent f188da5 commit a70322c

File tree

1 file changed

+56
-59
lines changed

1 file changed

+56
-59
lines changed

‎_pages/saml/authentication.md‎

Lines changed: 56 additions & 59 deletions
Original file line numberDiff line numberDiff line change
@@ -51,64 +51,61 @@ A proofed identity request at AAL2, with phishing resistent MFA, for email, phon
5151
</samlp:AuthnRequest>
5252
```
5353
{% endcapture %}
54-
{% capture response_elements %}
55-
The decrypted SAML Response contains a `<saml:Assertion>` element, which in turn contains elements like `<saml:Subject>`, `<saml:AttributeStatement>` and `<saml:AuthnStatement>`.
56-
{% endcapture %}
5754
{% capture decrypted_response %}
5855
```xml
59-
<Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion" ID="_d7d0f3fd-e65d-42ee-89f3-ac7d75a56a21" IssueInstant="2024-08-16T19:34:39Z" Version="2.0">
60-
<Issuer>http://localhost:3000/api/saml</Issuer>
61-
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
62-
<ds:SignedInfo>
63-
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
64-
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
65-
<ds:Reference URI="#_d7d0f3fd-e65d-42ee-89f3-ac7d75a56a21">
66-
<ds:Transforms>
67-
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
68-
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
69-
</ds:Transforms>
70-
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
71-
<ds:DigestValue>Q/FduVpL2MXEufa9fEZ7yelUEu39/NnTIpbvX2o38B8=</ds:DigestValue>
72-
</ds:Reference>
73-
</ds:SignedInfo>
74-
<ds:SignatureValue>aFzI+Sd2HRHxr9PVehZ0BuP9kZ/7/m0I5CwnmDtG+tv6Dw0egvZVI9PNrna53ClpG+LLKd6UOSkju+XVhGuNQg0zXb8qmCEUA6UIKBY604ci7TRgx4t5QoXTkg2go/AL9AiYCsjD/T5OECWtzpTEAgx+cJuUMN4n6kjhtNMPvrQo367ZRYYUuVPiCK6qJBgQQoUVbhsbXZy+AF7eN4JnP1dcyFE+nwUQqjMbUoXSBY+s3WLshI5B7YUMAYdyXVdB38R0s9LpXUzYWzt1RjmL98zdCiXvFj4uD1uecgDdu0FNZYr5O5cIzVBoxDHZsU7q+njIoldXfT5FRANwWKCp7w==</ds:SignatureValue>
75-
<ds:KeyInfo>
76-
<ds:X509Data>
77-
<ds:X509Certificate>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</ds:X509Certificate>
78-
</ds:X509Data>
79-
</ds:KeyInfo>
80-
</ds:Signature>
81-
<Subject>
82-
<NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">87c45cbc-1e44-4d89-a040-ebdf86f50add</NameID>
83-
<SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
84-
<SubjectConfirmationData InResponseTo="_78d78e66-586e-48af-a5dc-d96cea6488c9" NotOnOrAfter="2024-08-16T19:37:39Z" Recipient="http://localhost:4567/consume"/>
85-
</SubjectConfirmation>
86-
</Subject>
87-
<Conditions NotBefore="2024-08-16T19:34:34Z" NotOnOrAfter="2024-08-16T20:34:39Z">
88-
<AudienceRestriction>
89-
<Audience>urn:gov:gsa:SAML:2.0.profiles:sp:sso:localhost</Audience>
90-
</AudienceRestriction>
91-
</Conditions>
92-
<AttributeStatement>
93-
<Attribute Name="uuid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" FriendlyName="uuid">
94-
<AttributeValue>87c45cbc-1e44-4d89-a040-ebdf86f50add</AttributeValue>
95-
</Attribute>
96-
<Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" FriendlyName="email">
97-
<AttributeValue>john.doe@example.com</AttributeValue>
98-
</Attribute>
99-
<Attribute Name="aal" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="aal">
100-
<AttributeValue>http://idmanagement.gov/ns/assurance/aal/2</AttributeValue>
101-
</Attribute>
102-
<Attribute Name="ial" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="ial">
103-
<AttributeValue>http://idmanagement.gov/ns/assurance/ial/1</AttributeValue>
104-
</Attribute>
105-
</AttributeStatement>
106-
<AuthnStatement AuthnInstant="2024-08-16T19:34:39Z" SessionIndex="_d7d0f3fd-e65d-42ee-89f3-ac7d75a56a21">
107-
<AuthnContext>
108-
<AuthnContextClassRef>http://idmanagement.gov/ns/assurance/aal/2</AuthnContextClassRef>
109-
</AuthnContext>
110-
</AuthnStatement>
111-
</Assertion>
56+
<Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion" ID="_b7a3ca0f-25a4-4365-af81-da8f04740564" IssueInstant="2024-09-18T16:20:36Z" Version="2.0">
57+
<Issuer>https://idp.int.identitysandbox.gov/api/saml</Issuer>
58+
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
59+
<ds:SignedInfo>
60+
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
61+
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
62+
<ds:Reference URI="#_b7a3ca0f-25a4-4365-af81-da8f04740564">
63+
<ds:Transforms>
64+
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
65+
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
66+
</ds:Transforms>
67+
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
68+
<ds:DigestValue>5uICLRmnTHr/Ma7+uphAjCf86rmR+P6QELBf2C53mIc=</ds:DigestValue>
69+
</ds:Reference>
70+
</ds:SignedInfo>
71+
<ds:SignatureValue>XT9CguQWKBvbqVsJ+Khu5/eyl09JVhHkUuyFHa98ViZUBVgL/Hc9gzwUr43CA7OVOO+uMfCc6WvPKeADF9w9kqJaUgsi8LiKC/nfDCY6+UiRoep2zmXyFJRAvrD/HbgVfayx/4Nn3ponRPZ/T/oezhimssFF66m+/UAwJekO9kuob+5n+uaOiFOMuHEycSdASH/iFnTSR1ajdo6AaLomG6YT8zJbuRzcKmesouAKPiQCJFt2cgstEs1zw8dvTgmozy4qd/0aMiZ52eGcXoORD8VZOQiY63HT8F4wkhk5eGU05sFcyfpg7dXNtKOfCddHwyngmgmPhpRN30ew5njg7w==</ds:SignatureValue>
72+
<ds:KeyInfo>
73+
<ds:X509Data>
74+
<ds:X509Certificate>MIID+TCCAuGgAwIBAgIUUS6s9Rb+KY0fT0qKKgqPPJij/HMwDQYJKoZIhvcNAQELBQAwgYsxCzAJBgNVBAYTAlVTMR0wGwYDVQQIDBREaXN0cmljdCBvZiBDb2x1bWJpYTETMBEGA1UEBwwKV2FzaGluZ3RvbjEMMAoGA1UECgwDR1NBMRIwEAYDVQQLDAlMb2dpbi5nb3YxJjAkBgNVBAMMHWxvZ2luLmdvdi5pZGVudGl0eXNhbmRib3guZ292MB4XDTI0MDEyMjIwMTcwN1oXDTI1MDQwMTIwMTcwN1owgYsxCzAJBgNVBAYTAlVTMR0wGwYDVQQIDBREaXN0cmljdCBvZiBDb2x1bWJpYTETMBEGA1UEBwwKV2FzaGluZ3RvbjEMMAoGA1UECgwDR1NBMRIwEAYDVQQLDAlMb2dpbi5nb3YxJjAkBgNVBAMMHWxvZ2luLmdvdi5pZGVudGl0eXNhbmRib3guZ292MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmcFFn4b56vHlGBQ1Lx6AXz17sqKnCc6sJ+9csP1RtQBI0NpPHB2z9Di1PNk/ElK7V7yh3uMu4FJYw30GZFUl2f/ttsDkNHrwfh/jzbMNjrOSc0P25oem4uOUfeGH9jtMhKa+HZLOaOmcyWFKkYR2mwacEbQJ1CWviHtP8AzHUPSbHklAmusRLuygTjq0+QRJZgSezGqwU1L3ixPq+gMzPtMS+fxsMOVo2eosip440gz4rcqUUogtD2hV8EQi3+GIkGYuMTS81ug/385TCPEhzWMnNmDi3HykOZeRNb4GfCYw0Yx+v+cb7BPD5EdxUHNwliHvSiRAeYqLjBjuNUfKQIDAQABo1MwUTAdBgNVHQ4EFgQUusictYnNM2TbIt5STz2lkYN1sI8wHwYDVR0jBBgwFoAUusictYnNM2TbIt5STz2lkYN1sI8wDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEATuLF4kHeP7FY9Wzm3DfF+m/5wUhJEtbsF8J9Wq8duhQ4/gtZVJgMDUKLsnSDLCtWiRlsFXquI8tlo32JsVo5NfZI9WYsub7192iCYpqE+x5G+94tt5vAayoF7GKGPxatyldxAQUz7RUzwqas7NCYXQ0p7wZrMqF8z2yvaUgL55v8TJIb7RP+D8b47Cmzx7IYmx3Co30vZWysQe61Bv880hG11YJsBAc0hmyWlokJYZZVm+xcjKkm6aFyyAbeCe0Kh68QU7f9YkpFv/sW2RIvZ/Z0gvxjJE+YJBwOwPDDHdkb0ZmKOJvlaabi5lkTZvUtTHXb5Hu7DxRRt91dm77MlQ==</ds:X509Certificate>
75+
</ds:X509Data>
76+
</ds:KeyInfo>
77+
</ds:Signature>
78+
<Subject>
79+
<NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">34abda40-d5aa-4259-9f17-a3757fd2e094</NameID>
80+
<SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
81+
<SubjectConfirmationData InResponseTo="_bf054c05-5b2c-4773-a6a9-9ba075a87bc9" NotOnOrAfter="2024-09-18T16:23:36Z" Recipient="https://sp.int.identitysandbox.gov/auth/saml/callback"/>
82+
</SubjectConfirmation>
83+
</Subject>
84+
<Conditions NotBefore="2024-09-18T16:20:31Z" NotOnOrAfter="2024-09-18T17:20:36Z">
85+
<AudienceRestriction>
86+
<Audience>urn:gov:gsa:SAML:2.0.profiles:sp:sso:identitysandbox</Audience>
87+
</AudienceRestriction>
88+
</Conditions>
89+
<AttributeStatement>
90+
<Attribute Name="uuid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" FriendlyName="uuid">
91+
<AttributeValue>34abda40-d5aa-4259-9f17-a3757fd2e094</AttributeValue>
92+
</Attribute>
93+
<Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" FriendlyName="email">
94+
<AttributeValue>vraj@example.com</AttributeValue>
95+
</Attribute>
96+
<Attribute Name="aal" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="aal">
97+
<AttributeValue>http://idmanagement.gov/ns/assurance/aal/2</AttributeValue>
98+
</Attribute>
99+
<Attribute Name="ial" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="ial">
100+
<AttributeValue>http://idmanagement.gov/ns/assurance/ial/1</AttributeValue>
101+
</Attribute>
102+
</AttributeStatement>
103+
<AuthnStatement AuthnInstant="2024-09-18T16:20:36Z" SessionIndex="_b7a3ca0f-25a4-4365-af81-da8f04740564">
104+
<AuthnContext>
105+
<AuthnContextClassRef>http://idmanagement.gov/ns/assurance/aal/2?phishing_resistant=true</AuthnContextClassRef>
106+
</AuthnContext>
107+
</AuthnStatement>
108+
</Assertion>
112109
```
113110
{% endcapture %}
114111

@@ -174,9 +171,9 @@ The decrypted SAML Response contains a `<saml:Assertion>` element, which in turn
174171
<div class="grid-row grid-gap">
175172
<div class="desktop:grid-col-7 mobile:grid-col-full">
176173
<h2 id="authentication-response">Authentication response</h2>
177-
<p>After the user authenticates, Login.gov will redirect and POST a form back to your registered Assertion Consumer Service URL with a hidden form control named SAMLResponse.</p>
178-
<p>The `SAMLResponse` is a base64-encoded XML payload that contains data that is encrypted with the service provider's public key.</p>
179-
<p>{{ response_elements | markdownify }}</p>
174+
<p markdown="1">After the user authenticates, Login.gov will redirect and POST a form back to your registered Assertion Consumer Service URL with a hidden form control named `SAMLResponse`.</p>
175+
<p markdown="1">`SAMLResponse` contains a base64-encoded XML payload that contains data that is encrypted with the service provider's public key.</p>
176+
<p markdown="1"> The decrypted `SAMLResponse` contains a `<saml:Assertion>` element, which in turn contains elements like `<saml:Subject>`, `<saml:AttributeStatement>` and `<saml:AuthnStatement>`. </p>
180177
<p>For example, {{ decrypted_response | markdownify }}</p>
181178
<a href="{{ '/saml/logout/' | prepend: site.baseurl }}" class="usa-link margin-top-4 mobile:display-none desktop:display-block">Next step: Logout</a>
182179
</div>

0 commit comments

Comments
 (0)