Troubleshooting SAML 2.0 Exchange #SAML #IdM #Identity #

1. Download and install Live HTTP Headers (a Firefox add-on)
2. Enable Live HTTP Headers from your browser (Tools>Live HTTPHeaders)

Capture:

1. Attempt the SSO between IDP and SP
2. In LiveHTTPHeaders look for string labeled “SAMLResponse” and capture (copy) the entire string.  This is a base64 and URLEncoded string.

Once you have captured the string:

1. Browse over to SAML 2.0 Debugger and paste the SAML Response string into the window.
2. Click on Decode

This will show you what the assertion that is being passed from the IDP to the SP looks like.  It’s very helpful to determine what attributes and values are being provided to the SP.  In my case I had neglected to include a key attribute that identified the IDP to the SP.
Good luck and let me know if you have any questions.

More Here

Courtesy:http://blog.tumy-tech.com/2010/10/08/troubleshooting-saml-2-0-exchange-saml-idm-identity-federation/