http://groups.google.com/group/google-apps-apis/browse_thread/thread/35c...
For example, if your domain is "domain.com" and your ACS URL is
"https://www.google.com/a/domain.com/acs", then the Recipient
attribute in the SAMLResponse would be:

<samlp:Response ...>
  <saml:Assertion ...>
    <saml:Subject>
      <saml:NameID ...>u...@domain.com</saml:NameID>
      <saml:SubjectConfirmation ...>
        <saml:SubjectConfirmationData Recipient="https://
www.google.com/a/domain.com/acs" .../>
      </saml:SubjectConfirmation>
    </saml:Subject>
  </saml:Assertion>
</samlp:Response>
CommentFileSizeAuthor
#1 googleauth.module.patch5.72 KBangad_singh

Comments

angad_singh’s picture

angad_singh commented
StatusFileSize
new googleauth.module.patch5.72 KB

The value of $curr in googleauth.module is incorrect. It doesn't have the required tag - SubjectConfirmationData. I have replaced it with the response XML template obtained from the PHP reference implementation of SSO provided by Google. The patch for googleauth.module with required changes is attached.