Ensuring Groups are Being Passed as an Attribute in SAML Assertion

Description: During a new integration, you may want to verify that certain groups are being passed as part of an attribute.

Resolution: In order to confirm, you can run a SAML trace in Firefox by using the following add-on:

https://addons.mozilla.org/en-US/firefox/addon/saml-tracer/

You'll want to clear the current traffic within the SAML Tracer window, navigate to the URL of the new integration, authenticate through, and pause the trace. Scroll down to the POST method and click on the SAML tab and underneath, you will see the group(s) being passed, as indicated in the below photos.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.