salesforce Dreamforce On-Demand
Contact Us 1-800-596-4880
  1. Homepage
  2. Access Management
  3. Identity Providers
  4. External Identity Configurations
  5. Configure SAML

  6. Troubleshoot SAML Assertions

View a SAML Response in the Browser

To view your SAML response in a browser, perform a single sign-on and use the developer tools in your browser to find the bearer token and SAML response.

Complete this task before calling the MuleSoft Support team to assist you in troubleshooting your SAML 2.0 compliant SSO setup.

  1. Open a new tab in your browser and open Chrome Developer Tools, Firebug for Firefox, or a SAML tracer to capture the SAML response.

  2. In the Access Management navigation menu, click Business Groups.

  3. Click the name of your root organization.

  4. Click the Settings tab.

  5. Copy the domain name.

  6. Go to anypoint.mulesoft.com/accounts/login/domain_name. This will redirect you to your IDP’s Single sign on page.

  7. Enter the IDP account credentials and authenticate yourself.

  8. In the Chrome developer tool Form data window, select the Params tab.

    Other tools or tracers might have different labels.

  9. Record the SAML response element.

After recording the SAML response, use it to obtain a bearer token to access platform APIs. It is also useful to record the SAML response to provide to MuleSoft support if you contact them.

  1. Log in to the MuleSoft Support Portal at the following URL:

    https://www.mulesoft.com/support-login

  2. Provide a screen shot of your SAML configuration in Anypoint Platform.

  3. Include an XML SAML assertion.

Example: Chrome Developer Tools SAML Response Element

The following image shows a SAML response element in Chrome developer tools as a result of logging in to Anypoint Platform using SSO.

iam chromedevtools
Figure 1. SAML response element after logging in to Anypoint Platform in Google Chrome.

In the Network tab (1), the receive-id line (2) indicates that you attempted to log in to Anypoint Platform using single sign-on through your identity provider. Because the login is successful, you can expand receive-id and access form data that contains your SAML response element (3). Note that unsuccessful login attempts still generate SAML response elements.