How To: Encrypt a SAML Assertion

Version Affected: All

 

Overview

Depending on what the service provider (SP) requires, SecureAuth Identity Platform can encrypt the SAML assertion it sends during authentication.

Enable SAML Assertion Encryption

1. Go to the Post Authentication tab of the realm where the SAML assertion is configured.
2. Open the SAML Assertion / WS Federation section.
3. Set Encrypt SAML Assertion: to True.
4. In SAML Data Encryption Method:, select the method the SP requires.
5. If the SP also specifies an encryption method for the SAML key, select it in SAML Key Encryption Method:.
6. Paste the base64 blob of the SP's encryption certificate into Encryption Cert:. The SP holds the private key for this certificate.
7. Click Save.

The SAML assertion is now encrypted.

See also Troubleshooting: SAML Assertion Encryption Errors if the SP reports an error after encryption is enabled.


 

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.