SSO login failed - Capturing SAML for further troubleshooting

Diagnosing The Problem

The following steps describe how to view the SAML response from in your browser when troubleshooting a SAML related issue.

For all browsers, go to the page where you can reproduce the issue. Then follow the steps for the appropriate browser.

Google Chrome
Mozilla Firefox
Apple Safari
Microsoft Internet Explorer

Google Chrome

To view a SAML response in Chrome

These steps were tested using version 54.0.2840.87m. If you use another version, you might need to adapt the steps accordingly.

1. Press F12 to start the developer console.
2. Select the Network tab, and then select Preserve log.
3. Reproduce the issue.
4. Look for a SAML Post in the developer console pane. Select that row, and then view the Headers tab at the bottom. Look for the SAMLResponse attribute that contains the encoded request.

Mozilla Firefox

To view a SAML response in Firefox

This procedure was tested on version 37.0.2 of Mozilla Firefox. If you use another version, you might need to adapt the steps accordingly.

1. Press F12 to start the developer console.
2. In the upper right of the developer tools window, click options (the small gear icon). Under Common Preferences select Enable persistent logs.
3. Select the Network tab.
4. Reproduce the issue.
5. Look for a POST SAML in the table. Select that row. In the Form Data window on the right, select the Params tab and find the SAMLResponse element.

Apple Safari

To view a SAML response in Safari

These steps were tested using version 8.0.6 (10600.6.3). If you use another version, you might need to adapt the steps accordingly.

1. Enable Web Inspector in Safari. Open the Preferences window, select the Advanced tab, and then select Show Development Menu in the menu bar.
2. Now you can open Web Inspector. Click Develop, then select Show Web Inspector.
3. Select the Resources tab.
4. Reproduce the issue.
5. Look for a *.kenexa.com request.
6. Scroll down to find Request Data with the name SAMLResponse. The associated value is the Base64-encoded response.

Microsoft Internet Explorer

To view a SAML response in Internet Explorer

The best way analyze network traffic in Internet Explorer is through the use of a third-party tool.

• Follow the steps at http://social.technet.microsoft.com/wiki/contents/articles/3286.ad-fs-2-0-how-to-use-fiddler-web-debugger-to-analyze-a-ws-federation-passive-sign-in.aspx to download and install Fiddler and capture the data.