
Authentication workflow for the Active Directory Federated Services (ADFS) by Microsoft is different from 'standard' ECP based one. This plugin allows for authentication and fetching security token with SAML2 assertion inside, sending to the Service Provide and retrieving an unscoped token. Change-Id: I588de1967a7fb92c5928686d092895847553923a Implements: blueprint add-saml2-cli-authentication
19 lines
859 B
XML
19 lines
859 B
XML
<s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:a="http://www.w3.org/2005/08/addressing">
|
|
<s:Header>
|
|
<a:Action s:mustUnderstand="1">http://www.w3.org/2005/08/addressing/soap/fault</a:Action>
|
|
<a:RelatesTo>urn:uuid:89c47849-2622-4cdc-bb06-1d46c89ed12d</a:RelatesTo>
|
|
</s:Header>
|
|
<s:Body>
|
|
<s:Fault>
|
|
<s:Code>
|
|
<s:Value>s:Sender</s:Value>
|
|
<s:Subcode>
|
|
<s:Value xmlns:a="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">a:FailedAuthentication</s:Value>
|
|
</s:Subcode>
|
|
</s:Code>
|
|
<s:Reason>
|
|
<s:Text xml:lang="en-US">At least one security token in the message could not be validated.</s:Text>
|
|
</s:Reason>
|
|
</s:Fault>
|
|
</s:Body>
|
|
</s:Envelope> |