Revision history [back]

The process for validating a SAML signature using HTTP-redirect binding involves the following steps:

1. The SAML message is sent as a URL parameter in the HTTP request to the service provider.

2. The service provider extracts the SAML message from the URL parameter.

3. The SAML message contains a digital signature, which the service provider needs to validate.

4. The service provider retrieves the identity provider's public key from the SAML metadata.

5. The service provider then uses the public key to verify the digital signature on the SAML message.

6. If the signature is valid, the service provider trusts the SAML assertions contained in the message and processes them accordingly.

7. If the signature is invalid, the service provider rejects the SAML message and does not process any of its assertions.

Overall, the process involves extracting the SAML message, retrieving the public key, verifying the digital signature, and trusting the assertions if the signature is valid.