SAML SSO : Get identity provider's auth-token?

[Dylan Pokun]

Hello everyone,

Would you happen to know how to get the identity provider's auth-token please ? I can't seem to find it in any call in the Devtool Network-tab. In fact, when I navigate, I can't even see any call to the Identity Provider.

Thanks in advance !

Regards,

Dylan

[Christian Reichert (resolution) · Accepted solution]

Hi Dylan,

id.atlassian.com & your identity provider exchange a SAML authentication request & a SAML response (both XML based) via your Browser via some redirects or posts.

You will see them in the network tab of your browser but it's easer to capture them with Browser extensions like the SAML Tracer ... here is a good view of available tools including Browser extensions for Chrome & Firefox: https://www.samltool.com/saml_tools.php

Just because I am curious, what do you want with it? As I can't really see a sensible usecase ...

Cheers,
Chris

[Dylan Pokun]

Hi Christian, thanks for your answer! I'll try the SAML Tracer-like tools.

The use case is : I want to call some of the Identity Provider's REST APIs to query users and customers informations (like hardware / software / profesional infos). The IdP is Keycloak and the client doesn't want these infos duplicated in the Cloud (via CSV import etc.). I need the auth-token and the right roles on the IdP (like view-users) to do this.

Cheers and thanks again,

Dylan