Contact Us 1-800-596-4880
  1. Homepage
  2. Access Management
  3. Identity Management
  4. Managing Identity Providers
  5. Configuring SAML for SSO

  6. View a SAML Response in the Browser

View a SAML Response in the Browser

To view your SAML response in a browser, perform a single sign-on (SSO) and use the developer tools in your browser to find the bearer token and SAML response.

Complete this task before calling the MuleSoft Support team to assist you in troubleshooting your SAML 2.0 compliant SSO setup.

  1. Open a new tab in your browser and open Chrome Developer Tools, Firebug for Firefox, or a SAML tracer to capture the SAML response.

  2. In the Access Management navigation menu, click Business Groups.

  3. Click the name of your root organization.

  4. Click the Settings tab.

  5. Copy the domain name.

  6. Go to anypoint.mulesoft.com/accounts/login/domain_name. This will redirect you to your IDP’s single sign-on page.

  7. Enter the IDP account credentials and authenticate yourself.

  8. In the Chrome developer tool Form data window, select the Params tab.

    Other tools or tracers might have different labels.

  9. Record the SAML response element.

After recording the SAML response, use it to obtain a bearer token to access platform APIs. It is also useful to record the SAML response to provide to MuleSoft support if you contact them.

  1. Log in to the MuleSoft Support Portal at the following URL:

    https://www.mulesoft.com/support-login

  2. Provide a screen shot of your SAML configuration in Anypoint Platform.

  3. Include an XML SAML assertion.

Example: Chrome Developer Tools SAML Response Element

The following image shows a SAML response element in Chrome developer tools as a result of signing in to Anypoint Platform using SSO.

iam chromedevtools
Figure 1. SAML response element after signing in to Anypoint Platform in Google Chrome.

In the Network tab (1), the receive-id line (2) indicates that you attempted to sign in to Anypoint Platform using single signon through your identity provider. Because the signin is successful, you can expand receive-id and access form data that contains your SAML response element (3). Unsuccessful signin attempts still generate SAML response elements.