Tobase64 HTTP-Redirect binding

Still struggling with encrypting a SAML request to be sent to an ADFS server.  Turns out there are multiple ways to encode strings.  By default the utf-8 encrption option with the toBase64 tag uses HTTP-Post binding.  I need it my script to use HTTP-REDIRECT binding. 
The code I'm using is this:
<CFSAVECONTENT VARIABLE = "samlAssertionXML">
<samlp:AuthnRequest IssueInstant="2014-09-16T19:24:18.343Z" ID="_kdls_testing_application_for_single_sign_on" Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://localhost/sde</saml:Issuer>
<samlp:NameIDPolicy AllowCreate="true"/>
</samlp:AuthnRequest>
</cfsavecontent>
<cfscript>
  samlAssertionXML = toBase64(toString(TRIM(samlAssertionXML)), "utf-8");
</cfscript>
When I take the string that gets returned by the toBase64 tag and use the SAML 2.0 Debugger the string gets de-crypted correctly.  But when I re-encrypt the string using HTTP-REDIRECT binding I get a different encryption string.  If I re-encrypt using the HTTP-POST binding I get the string I passed to the toBase64 tag.
So my question is how to I tell CF that I need to use HTTP-REDIRECT binding when I encrypt the string?

After a little searching around I found the following snippet of code that seems to do the trick.  It adds a ton of AAAAAAAAAAAAAA's to the encrypted string but the ADFS server isn't complaining and as I have a fast approaching deadline I'll live with them for now.  Still if you understand JAVA (I haven't developed in that language so I really don't) please clue me in to how this code does what it does.
<!--- perform Deflate, Base64 encode, and URL encode --->
<cfscript>
  saml_deflate = createObject("java", "java.util.zip.Deflater");
  saml_deflate.init(9,true);
  saml_deflate.setInput(samlAssertionXML.getBytes("UTF-8"));
  saml_deflate.finish();
  compressedDataLength = saml_deflate.deflate(output);
  data64 = toBase64(output,"UTF-8");
  data64url = urlencodedformat(data64);
</cfscript>

Similar Messages

  • SharePoint public facing site does not open in sharepoint designer after giving http redirect in IIS

    I have a public facing sharepoint site
    We gave http redirect in IIS due to which I am unable to open the site in SharePoint Designer and gives error message site not found in webserver.
    If i revert back the settings (remove the http redirect link) i m able to open the site in designer.Please let me know how can I resolve the issue in opening site in SharePoint designer after http redirect setting done in IIS

    Looks like an AAM issue. What URL of the site you are trying to open with designer and what are your AAM settings?
    Ronald Bruinsma - Independent SharePoint Consultant - iDocs.info - The Netherlands
    Ronald I got the same issue here is my info:
    sharepoint site: http://<servername>/sites/mycompany
    <ServerIP>
    Default
    http://servername
    <Servername>
    Default
    http://servername
    http://contoso.mycompany.com
    Extranet
    http://contoso.mycompany.com
    In IIS webapp 80. http redirect:
    redirect requests to this destination is checked: http://contoso.mycompany.com/sites/mycompany
    can you help me? thanks

  • I have an iPhone 4S I have done the recent update 6.1 and now my App Store is not working when I go into the feature tab I get an error " too many HTTP redirects" how do I fix this ? The other tabs are working and it is working on my iPad also

    I am having a problem getting into the App Store on my iPhone since the recent update, I have a 4s and it appears the feature tab is not working. When I try to go into the feature tab in the App Store I get a message "too many HTTP redirects" ?... Does anyone now hoe to fix this issue, the other tabs are working okay and everything is working on my iPad ?

    Look at iOS Troubleshooting Wi-Fi networks and connections  http://support.apple.com/kb/TS1398
    iPad: Issues connecting to Wi-Fi networks  http://support.apple.com/kb/ts3304
    iOS: Recommended settings for Wi-Fi routers and access points  http://support.apple.com/kb/HT4199
    Additional things to try.
    Try this first. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
    Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
    Change the channel on your wireless router (Auto is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
    Another thing to try - Go into your router security settings and change from WEP to WPA with AES.
    How to Quickly Fix iPad 3 Wi-Fi Reception Problems
    http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
    If none of the above suggestions work, look at this link.
    iPad Wi-Fi Problems: Comprehensive List of Fixes
    http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
    Fix iPad Wifi Connection and Signal Issues  http://www.youtube.com/watch?v=uwWtIG5jUxE
    Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
    Unable to Connect After iOS Update - saw this solution on another post.
    https://discussions.apple.com/thread/4010130
    Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
    ~~~~~~~~~~~~~~~
    If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
     Cheers, Tom

  • HT1933 How are you supposed to do this when it DOESN'T EVEN WORK!!!! you press report problem and it comes up saying " too many http redirects". Total useless !

    How are you supposed to REPORT THE PROBLEM when it DOESN'T EVEN WORK!!
    I clicked it as I got a receipt for something that HAS NOT EVEN BEEN BOUGHT ! (It's funny how apple try to charge me twice for something when I work nightshift and my phones switched off!)
    and all that happened was it came up saying "too many HTTP redirects" .
    And it won't let me report it ! X

    Go here:
    http://www.apple.com/support/itunes/contact/
    and follow the instructions to report your issue to the iTunes Store.
    Regards.

  • TS1702 I purchased 2 packages of gems for skylanders and only received 1 package. Got email receipts and tried to report problem on ipad2 and it keeps coming up with to many https redirects. Can anyone help? Just want my gems :).

    I purchased 2 packages of gems for skylanders and only received 1 package. Got email receipts and tried to report problem with link in email on my ipad2 and it keeps coming up with to many https redirects. Can anyone help? Just want my gems :).

    Contact iTunes Customer Service and request assistance
    Use this Link  >  Apple  Support  iTunes Store  Contact

  • How do I get rid of (to many HTTP redirects) from my App Store

    Every time I go to categories or top 25 I cannot get in it keeps saying to many HTTP redirect how can I fix this
    It did not start until I had my phone reset. And I try resetting my phone again and it won't even reset now

    Clearing the History and Cookies on Safari then closing safari from the background has helped me with this issue
    Go to Settings then click on Safari. Once there, clear the cookies and data. Then go into safari app then clear the history. Once you do that, close safari from the background by double clicking the home button, hold the app then hit the red - to close.

  • Every time I click on the Categories tab or Top 25 tab in the app store, it says 'too many http redirects'

    Every time I open the app store on my iPod touch, it says 'too many http redirects' whenever I click on the Categories and Top 25 tabs. I tried force quitting the app store, that didn't work. I tried closing all windows in Safari and force quitting safari, also didn't work. I reset the network settings, that didn't work either. When I reset all settings, it appeared to work. The tabs were different (it had a Genius tab), but it worked. However, immediately after force quitting the app store (I force quit a lot to keep as much RAM clear as possible), the same thing happened again. Does anyone know a permanent, Apple-supported solution to this problem? And please do not say restoring it. I don't want to start from scratch just to potentially experience the same problem.

    See:
    to many HTTP redirects: Apple Support Communities
    However, it seems to be an Apple/network problem beyond your control

  • I need to know how to force a https redirect in Adobe Muse if this can't be done please tell me so I don't waste any more time... please

    I need to know how to force a https redirect in Adobe Muse if this can't be done please tell me so I don't waste any more time... please

    Protocol usage and redirects are a server-side thing. This has nothing to do with designing the web page and thus nothing with Muse, either.
    Mylenium

  • Setting HTTPS redirect in NetWeaver CE 7.1 EhP1

    I would like to redirect all HTTP requests such that users will always use HTTPS access. I found an OSS note 973644 that explains the steps for non CE environments. Does anyone know how to setup HTTPS redirect on NetWeaver CE 7.1 Ehp1?
    Regards,
    Asif

    Hi Lee,
    I think I know how to solve this. I have just solved a similar problem with my PI 7.1 EHP1. Deployment in JSPM of various software components all failed like this example:
    JSPM log:
    Deploy status is 'Aborted'
    Client path '
    pi71\sapmnt\trans\EPS\in\SAPXIAF04_7-20002649.SCA'
    Description:'1. ERROR CODE DPL.DS.5089  Exception during generating components of sap.com/com.sap.aii.af.app  application in webservices_container container.
       -> com.sap.engine.services.webservices.espbase.configuration.BindingData.getConfigurationType()I'.
    Default Trace:
    Caused by: java.lang.NoSuchMethodError: com.sap.engine.services.webservices.espbase.configuration.BindingData.getConfigurationType()I
    at com.sap.engine.services.webservices.server.deploy.WSBaseAbstractDProcess.getBindingDataId
    After that most of the browser based admin apps, such as NetWeaver Administrator ( /nwa ), would refuse to start.
    But finally after several tests, searching on SDN+SMP and restore to backup version I found the solution in [SAP Note 1328776|http://service.sap.com/sap/support/notes/1328776] which describes a similar problem: Update to the newest version of ENGINEAPI 7.11. Today this is ENGINEAPI04P_4-20002603.SCA.
    You may also want to make sure that you are running the newest version of the Configuration Wizard, so you should check/update LMTOOLS, LMCTC and LMCFG*, currently LMTOOLS04P_3-20002705.SCA, LMCTC04P_1-20002694.SCA and LMCFG04P_4-20002729.SCA.
    I hope this proves to be useful.
    regards
    Mauri

  • HTTP POST binding not available in 11g???

    Hi,
    I am trying to call a HTTP service using HTTP POST, passing HTTP params to it. I created a small bpel process in 10.1.3.4, and used the HTTP POST samples, which worked out really well.
    However target platform is 11g. So I just tried to migrate the project and got the following warnings.
    WARNUNG: UPGBPEL-02043: The WSDL used for "HTTPPostParam" has HTTP based binding definition for the porttype specified. SOA Suite 11g does not support this and hence upgrade will not carry this over to the generated composite. Compilation will fail if the composite reference is not setup with binding. After upgrade, setup the reference by specifying a WSDL with SOAP binding. Check SOA Upgrade guide for more information.
    WARNUNG: UPGBPEL-02009: No Binding setup for : "HTTPPostParam". This will cause compilation of the upgraded project to fail. Check SOA Upgrade documentation on manual steps necessary to bind this composite reference. If necessary, upgrade and deploy any dependencies. If planning to retain 1013x nodes in this projects dependency tree, check earlier part of this log for 1013x WSDL URLs that can be used.
    Does this really tell me that HTTP post or get is not available anymore? Or do I miss anything? Or is there a workaround?
    Thanks and regards,
    Thomas
    PS: This is my POSTParam WSDL, which is not yet complete, but working on 10.1.3.4
    <?xml version="1.0" encoding="utf-8"?>
    <definitions xmlns:http="http://schemas.xmlsoap.org/wsdl/http/"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
    xmlns:tns="http://http.oracle.com/postParam"
    xmlns:mime="http://schemas.xmlsoap.org/wsdl/mime/"
    xmlns:plnk="http://schemas.xmlsoap.org/ws/2003/05/partner-link/"
    targetNamespace="http://http.oracle.com/postParam"
    xmlns="http://schemas.xmlsoap.org/wsdl/"
    xmlns:get="http://xmlns.oracle.com/HttpClientBPELProcess">
    <types>
    <xsd:schema xmlns="http://www.w3.org/2001/XMLSchema">
    <xsd:import schemaLocation="HttpClientBPELProcess.xsd"
    namespace="http://xmlns.oracle.com/HttpClientBPELProcess"/>
    </xsd:schema>
    <!--
    <xsd:schema elementFormDefault="qualified"
    targetNamespace="http://http.oracle.com/postParam">
    <xsd:element name="param" nillable="true" type="xsd:string"/>
    </xsd:schema>
    -->
    </types>
    <message name="HttpPostParamIn">
    <part name="HighwayEndpointId" type="xsd:string"/>
    <part name="HighwayMessageId" type="xsd:string"/>
    <part name="HighwayMessage" type="xsd:string"/>
    <part name="Synchronous" type="xsd:string"/>
    <part name="DISABLE_MESSAGEINPUT_ECHO" type="xsd:string"/>
    </message>
    <message name="HttpPostParamOut">
    <part name="Body" element="get:Request"/>
    </message>
    <portType name="HttpPostParamPortType">
    <operation name="PostData">
    <input message="tns:HttpPostParamIn"/>
    <output message="tns:HttpPostParamOut"/>
    </operation>
    </portType>
    <binding name="HttpPostParamBinding" type="tns:HttpPostParamPortType">
    <http:binding verb="POST"/>
    <operation name="PostData">
    <http:operation location="/highway/http/SubmitMessage"/>
    <input>
    <mime:content type="application/x-www-form-urlencoded"/>
    <!--
    <mime:content type="text" part="param1"/>
    <mime:content type="text" part="param2"/>
    -->
    </input>
    <output>
    <mime:mimeXml part="Body"/>
    </output>
    </operation>
    </binding>
    <service name="PostParamService">
    <port name="HttpPostParamPort" binding="tns:HttpPostParamBinding">
    <http:address location="http://itrax03.wlgore.com:8080"/>
    </port>
    </service>
    <plnk:partnerLinkType name="PostParamService">
    <plnk:role name="PostParamServiceProvider">
    <plnk:portType name="tns:HttpPostParamPortType"/>
    </plnk:role>
    </plnk:partnerLinkType>
    </definitions>

    The sample that heidi posted above is basically the codebase to the http binding we are planning to ship with Patchset 2. It's based on Jax-WS' http binding.
    Let me know if you run into any issues (the source is included - so you can play around :) - no license )

  • Http redirects not changing url in address bar

    I'm going crazy trying to fix a major bug in our application. Http
    redirects are not changing the url in the address bar of the latest versions of internet explorer. But this only happens if the redirected page is an xml page with an xslt reference for the browser to do the transformation. Mozilla seems to work fine, but I seem to have encountered a major bug in Internet Explorer. If anybody can help or at least point me in a direction I'd be SO grateful. This doesn't seem to be a java servlet specific issue, but that's what we're using so I thought I'd ask the question here too.
    We have an MVC type framework we developed. For example, if you were to add something to a shopping cart, the url might be:
    http://ecommerce.com/cart/add?sku=54321. In the add servlet, we would add the sku to your shopping cart and then redirect to, let's say,
    http://ecommerce.com/displaycart. I think this is how most MVC frameworks work. And it works great for us.
    The problem began when we started sending XML to the browser with an XSLT stylesheet. So now the browser does the transformations (if the browser is capable of doing them, which we check) instead of the server. This is a major part of our project. One of the reasons we started this.
    The problem is that Internet Explorer no longer updates the url in the
    address bar after a redirect. Mozilla works great though. We haven't
    tested on other xslt capable browsers yet. In the example above, what would happen is after adding something to your shopping cart, the "displaycart" page would be shown but the http://ecommerce.com/cart/add?sku=54321 url would be shown in the address bar. It wouldn't seem to be too big of a deal since everything works. But now all the relative links are messed up. They start from the "cart" directory. So we need absolute links. But that introduces many other problems. We then need to know the host and the parent directories (not as easy as it seems).
    So is there a solution? Is this a big bug that nobody has realized yet (or maybe they have, but my searches don't see it) in internet explorer? Is there a way for the redirected url to appear in the address bar from a browser-based xslt transformation in internet explorer? By the way, I'm testing with the latest version of IE6.0 as of July 7, 2003.
    When testing, redirects work perfect if I do the xslt transformation on the server side and just send plain html to internet explorer. And it works perfect with either serverside or browserside xslt transformations in mozilla.
    Scott Mueller
    AccelerateBiz Incorporated

    As I've been reading in the specs, microsoft, etc, it seems that it's not what's supposed to happen. But the specs are not very specific about this. However, internet explorer DOES always replace the url in the address bar with the redirected url if HTML is being returned from the redirected servlet. As is the case with all other browsers. So, at least, this behavior is the de-facto standard.
    BUT when the redirected to page is an xml page which references an xslt stylesheet.. then, ONLY in internet explorer, the original url is what's shown in the address bar (and, more importantly, what's used as the base url). Regardless of what the links look like or how they're manipulated in the transformed HTML that ends up being shown, I can't seem to make the url in the address bar the redirected url..

  • Http redirection limit in safari

    Hi,
    I'll try to be as clear as possible about my question:
    Situation
    I took 10 Macbook Air's out of their boxes, installed Mountain Lion and installed the latest updates.
    When visiting a (Citrix) portal, i have no issues with Safari after logging in and clicking on the presented ICA file.
    Next, i took 10 Macbook Pro's out of their boxes, repeated the same steps to install and update them. When visiting that same portal, logging in with the same credentials, i get errors in Safari about too many HTTP redirects.
    Research on this topic
    I've researched this error, many people blame the website your visiting. this is wrong in my case, since the first 10 laptops didn't show that error.
    It is advised to reset Safari; i tried. didn't solve my problem. Besides, why would it make a difference since the first 10 laptops didn't get that error ?
    It turned out, after Googling some more about this, that each browser (Safari, Chrome, Firefox, Opera) has a limit set for HTTP redirections (the default amount of max. redirections is 20).
    On lots of websites people fixed this issue bij installing FireFox, which i is my preferred solution; i want my customers to just use Safari. But, for being sure if this would indeed solve the issue i tried this solution: in about:config changing the properties for HTTP redirection settings from 20 to some higher value (i used 999 in my test) fixed the issue. This seems to be the proof getting the "too many HTTP redirections" isn't neccesarily caused by the website. It is caused by the restriction of having a max ammount of http redirections in Safari.
    The Question
    In Safari 6, how do i change the max ammount of HTTP redirections ?
    Is there some sort of hidden preference pane ?

    Then, your only action is to follow its steps:
    If the issue persists, sending feedback to the affected website may help. You can also send feedback to Apple by choosing Safari > Report Bugs to Apple.
    Also, a google search for redirects  site:developer.apple.com
    yields
    http://developer.apple.com/library/mac/#documentation/cocoa/conceptual/urlloadin gsystem/Articles/RequestChanges.html and
    http://developer.apple.com/library/ios/documentation/Foundation/Reference/NSURLC onnectionDataDelegate_protocol/NSURLConnectionDataDelegate_protocol.pdf

  • HT1689 Can't get iTunes .ipad says "too many http redirects " what's that anyone help please? been charged twice for double down chips.

    What does "Too Many HTTP redirects" please? I am trying too report a purchasing problem, but keep getting that message. I'm trying to connect too ITunes.

    Susiebwb wrote:
    Can any one please assist me.... I paid twice for an app by mistake.... ...
    To Contact iTunes Customer Service and request assistance
    Use this Link  >  Apple  Support  iTunes Store  Contact

  • TS1702 I have tried to submit a dissatisfaction report following your instructions from my invoice for the recent purchase of smart office 2.  I can get no further as a report code keeps appearing saying too many http redirects so I can not get any furthe

    I have tried to submit a dissatisfaction report following your instructions from my invoice for the recent purchase of smart office 2.  I can get no further as a report code keeps appearing saying too many http redirects so I can not get any further.
    I have also sent 3 emails to the company if Smart Office 2 with no response.
    How do I report my dissatisfaction which is growing with the frustration of not being able to contact any one!
    Zena Parton

    I have tried to submit a dissatisfaction report following your instructions from my invoice for the recent purchase of smart office 2.  I can get no further as a report code keeps appearing saying too many http redirects so I can not get any further.
    I have also sent 3 emails to the company if Smart Office 2 with no response.
    How do I report my dissatisfaction which is growing with the frustration of not being able to contact any one!
    Zena Parton

  • Enable WebAuth on WLC to intercept https (or https redirection) for authentication

    Hi all
    My company is using WLC with Guest access feature, and use Layer 3 security authentication to permit only Guests who provided valid user/password to access.
    But we met a issue that, when guests connect to Guest SSID successful, on PC they have to open web browser and access to 1 website by http, after that WLC will intercept and redirect to authentication page.
    If customer access to https (as google, gmail, ...) WLC cannot intercept and redirect to authentication. Because almost customers access to https://google.com at first by their habit.
    On my firewall, I can do intercept by both http and https, so I wonder on WLC I can enable intercepting and redirecting to authentication of https also
    If possible, please advice us how to enable this feature.
    Regards
    Hai Dao Tuan

    Thanks all
    I also just found a link that mentions about this case clearly and commands to enable it
    https://supportforums.cisco.com/document/12398536/understanding-https-redirect-over-web-auth
    (WLC)> config wlan security web-auth enable <wlan-id>
    (WLC)> config network web-auth https-redirect enable

Maybe you are looking for

  • Is there a way to have two different iTunes for two different iPhones on one Windows User account?

    Using Windows 7, iphone 4. I've read as many threads on these forums and as many kb's as I could find, but I sttill can't figure it out. I have 2 iPhones. Let's call them, "wife" and "hubby". I want to have two separate iTunes, one for each of the ph

  • HP LJ 3700n

    Hello colleagues, i have very strange problem with my color printer HP LaserJet 3700n. It is network printer and i am accessing it through my DC with OS Windows Server x64. Problem is the following - i can not print in color. I have installed the lat

  • Make rows as non editable in ALV

    Hi Experts, I have a standard ALV table where records are fetched from backend table. Here I have a field Approved as check box. My requirement is I need to make all the rows as non editable, if the Approved checkbox is checked. How can I achieve thi

  • Inconsistent results with SDO_RELATE and boundary conditions

    Hello, I am using SDO_RELATE to find all points in one table with any interaction with a polygon selected from a second table. Pretty basic stuff. I noticed one point which exactly matches a vertex on the query polygon was not getting selected as exp

  • Third party MIDI/Audio driver conflict message!@#@!#@

    I'm getting the "Logic Pro has detected a possible conflict between one or more third party MIDI or audio drivers" message. I'm running a G5 dual 2 gig, OSX 10.4.8, Logic Pro 7.2.3, Emagic AMT8 and RME DSP9652. When I start Logic, it hangs on "checki