Step 12: Call the SAML resume endpoint

GET {{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}

This example shows the GET /{{envID}}/saml20/resume?flowId={{flowID}} operation to return the flow back to the authorization service to continue processing after the completion of the SAML authentication flow.

The request URL includes the query parameter ?flowId={{flowID}} to pass in the current flow ID (also specified in the previous step).

The response returns a 200 Success message, and the response data includes an encoded SAMLResponse.

Example Request

curl --location --globoff '{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}'

var options = new RestClientOptions("{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}")
{
  MaxTimeout = -1,
};
var client = new RestClient(options);
var request = new RestRequest("", Method.Get);
RestResponse response = await client.ExecuteAsync(request);
Console.WriteLine(response.Content);

package main

import (
  "fmt"
  "net/http"
  "io"
)

func main() {

  url := "{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}"
  method := "GET"

  client := &http.Client {
  }
  req, err := http.NewRequest(method, url, nil)

  if err != nil {
    fmt.Println(err)
    return
  }
  res, err := client.Do(req)
  if err != nil {
    fmt.Println(err)
    return
  }
  defer res.Body.Close()

  body, err := io.ReadAll(res.Body)
  if err != nil {
    fmt.Println(err)
    return
  }
  fmt.Println(string(body))
}

GET /{{envID}}/saml20/resume?flowId={{flowID}} HTTP/1.1
Host: {{authPath}}

OkHttpClient client = new OkHttpClient().newBuilder()
  .build();
MediaType mediaType = MediaType.parse("text/plain");
RequestBody body = RequestBody.create(mediaType, "");
Request request = new Request.Builder()
  .url("{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}")
  .method("GET", body)
  .build();
Response response = client.newCall(request).execute();

var settings = {
  "url": "{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}",
  "method": "GET",
  "timeout": 0,
};

$.ajax(settings).done(function (response) {
  console.log(response);
});

var request = require('request');
var options = {
  'method': 'GET',
  'url': '{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}',
  'headers': {
  }
};
request(options, function (error, response) {
  if (error) throw new Error(error);
  console.log(response.body);
});

import requests

url = "{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}"

payload = {}
headers = {

}

response = requests.request("GET", url, headers=headers, data=payload)

print(response.text)

<?php
require_once 'HTTP/Request2.php';
$request = new HTTP_Request2();
$request->setUrl('{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}');
$request->setMethod(HTTP_Request2::METHOD_GET);
$request->setConfig(array(
  'follow_redirects' => TRUE
));
$request->setHeader(array(

));
try {
  $response = $request->send();
  if ($response->getStatus() == 200) {
    echo $response->getBody();
  }
  else {
    echo 'Unexpected HTTP status: ' . $response->getStatus() . ' ' .
    $response->getReasonPhrase();
  }
}
catch(HTTP_Request2_Exception $e) {
  echo 'Error: ' . $e->getMessage();
}

require "uri"
require "net/http"

url = URI("{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}")

http = Net::HTTP.new(url.host, url.port);
request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

var request = URLRequest(url: URL(string: "{{authPath}}/{{envID}}/saml20/resume?flowId={{flowID}}")!,timeoutInterval: Double.infinity)
request.httpMethod = "GET"

let task = URLSession.shared.dataTask(with: request) { data, response, error in
  guard let data = data else {
    print(String(describing: error))
    return
  }
  print(String(data: data, encoding: .utf8)!)
}

task.resume()

Example Response

200 OK

<!-- template name: saml20.response.autopost.ftl -->
<html>
    <head>
        <title>Submit Form</title>
    </head>
    <body onload="javascript:document.forms[0].submit()">
        <noscript>
            <p>
                <strong>Note:</strong> Since your browser does not support JavaScript,
                        you must press the Resume button once to proceed.
            </p>
        </noscript>
        <form method="post" action="https://example.com">
            <input type="hidden" id="SAMLResponse" name="SAMLResponse" value="PHNhbWxwOlJlc3BvbnNlIElEPSJpZC1lNWY4Zjc5Ny1lZTZlLTQzNTctOGViNC00YmVmMjkzODcxNWIiIFZlcnNpb249IjIuMCIgSXNzdWVJbnN0YW50PSIyMDIzLTA1LTE2VDE4OjAyOjM2LjM1OVoiIEluUmVzcG9uc2VUbz0iSUQtOGExZjA2YTMtZjQ3ZS00NzdiLWJhYzQtMzE4NjZhOWZiMTAxIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9leGFtcGxlLmNvbSIgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCI+PHNhbWw6SXNzdWVyIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iPmh0dHBzOi8vYXV0aC5waW5nb25lLmNvbS8wODJkYmE4Ni1kMzZlLTQxM2UtODViNC1lZTQ5OWE1Y2VhNTU8L3NhbWw6SXNzdWVyPjxzYW1scDpTdGF0dXM+PHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPjwvc2FtbHA6U3RhdHVzPjxzYW1sOkFzc2VydGlvbiBJRD0iaWQtMmMzZGY4ZDctYTlhMS00NTZjLWEyOTEtMmVkZTg2NTRkNTAyIiBWZXJzaW9uPSIyLjAiIElzc3VlSW5zdGFudD0iMjAyMy0wNS0xNlQxODowMjozNi4zNTlaIiB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIj48c2FtbDpJc3N1ZXI+aHR0cHM6Ly9hdXRoLnBpbmdvbmUuY29tLzA4MmRiYTg2LWQzNmUtNDEzZS04NWI0LWVlNDk5YTVjZWE1NTwvc2FtbDpJc3N1ZXI+PGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+PGRzOlNpZ25lZEluZm8+PGRzOkNhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxkc2lnLW1vcmUjcnNhLXNoYTI1NiIvPjxkczpSZWZlcmVuY2UgVVJJPSIjaWQtMmMzZGY4ZDctYTlhMS00NTZjLWEyOTEtMmVkZTg2NTRkNTAyIj48ZHM6VHJhbnNmb3Jtcz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI2VudmVsb3BlZC1zaWduYXR1cmUiLz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8+PC9kczpUcmFuc2Zvcm1zPjxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyNzaGEyNTYiLz48ZHM6RGlnZXN0VmFsdWU+MzVRN0lnc3plQk9WYWtKSUR5ZDM2WVM0dGhGYXBPZGV2ZEFKY1U5WDQ5az08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU+SHNPQVJvdllHRjl2bTVad3I2dWswUXhVdmR6L0JpTHprUVFDN25NUEtCTEFHOFB3V0dyMG50RHFOM3IyRW9wVUQ2eDFiTTVtc3lPcDlTd2VHL21kREdDdjJoNEJFdVV2OEtGbUJEZWQ5WmYrVzVKaDJNWU9CR0VqRUh2THJWTFgxOHI4SjJ2dE1tRllLbVFHNHpuVnBCSGtqZTFCQ3NNa0cxa0xyUmdOMkNnUlJUUHlQeTBraHFYM1dIemdCQ1lqRmI2NE1IbHcxY1NMM0FTWk8wbDcxMTM4N3lJTklYdGN6RHY1YTROa0MrbFNkbVZ2ZkMveUppcnFzWllxbk1FQk9VUmwvMFlQVWxUUEdwWXFNZ0EyMjAvNFJmMnlNdjBWdEVaeTBmQkEyTmExMXFUYk9Uc2phS2d2QlFrWEZocXVxOXpoZFNEOVEwS05MWmdoOUFFdlhnPT08L2RzOlNpZ25hdHVyZVZhbHVlPjxkczpLZXlJbmZvPjxkczpYNTA5RGF0YT48ZHM6WDUwOUNlcnRpZmljYXRlPk1JSURoRENDQW15Z0F3SUJBZ0lHQVhmYm14VmlNQTBHQ1NxR1NJYjNEUUVCQ3dVQU1JR0NNUXN3Q1FZRFZRUUdFd0pWVXpFV01CUUdBMVVFQ2d3TlVHbHVaeUJKWkdWdWRHbDBlVEVXTUJRR0ExVUVDd3dOVUdsdVp5QkpaR1Z1ZEdsMGVURkRNRUVHQTFVRUF3dzZVR2x1WjA5dVpTQlRVMDhnUTJWeWRHbG1hV05oZEdVZ1ptOXlJRTVsZHkxRmJuWmZNVFl4TkRJNU56RXhNQ0JsYm5acGNtOXViV1Z1ZERBZUZ3MHlNVEF5TWpVeU16VXhORGxhRncweU1qQXlNalV5TXpVeE5EbGFNSUdDTVFzd0NRWURWUVFHRXdKVlV6RVdNQlFHQTFVRUNnd05VR2x1WnlCSlpHVnVkR2wwZVRFV01CUUdBMVVFQ3d3TlVHbHVaeUJKWkdWdWRHbDBlVEZETUVFR0ExVUVBd3c2VUdsdVowOXVaU0JUVTA4Z1EyVnlkR2xtYVdOaGRHVWdabTl5SUU1bGR5MUZiblpmTVRZeE5ESTVOekV4TUNCbGJuWnBjbTl1YldWdWREQ0NBU0l3RFFZSktvWklodmNOQVFFQkJRQURnZ0VQQURDQ0FRb0NnZ0VCQU16ZXlkanNvbE1JYlRVQXhYOHRzZFJoSDFLalEwWlEvaGpBNkVwdHVQellpNkFmWWF3YS9TZi9hYkpsaDU2Qjl3QjJDT3BBOXFyeEo3bG1vRXNLWGxMYTViTU92OWpnb3RSOFh6UDFhR3VnQ0dzUEVpZGJnczgzaU1WTmxEb1VJMkRpQmc2LytKcW82VWZiTFJudk1DVHkzeGw1RzMyVEZxQjlMR0trRy9vWFVoT1U0TXNvbFkzUnY4ellybnFXVW5hcU5kNnoyQWVnRlZ2SkRIS29GZU1xa2M4aEo4S3JmQlpOVjJxaWtHaTI1Mk80VVRlZlpPdTBRaXBwcTBFdlVEZnNpdGpqdEcwaGZiazVOOHdIeFlnUTVWUjV2VndXUG5GbCs4dzd0WVNtYkZZcE03VDNHejdjOUdiNEgyQXdyRyttODlyWGdybzlFOE9YK3htTm1RY0NBd0VBQVRBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQU93aVY0Um5ZTGZ0ZWJKOHY2TE5ZZ2t2elRGYzhOaG9LV2QyT2NlT3dCWTUyU3BielBlajE4ZGpkZ0hMWXBET0ZPeUlPbUtHSXdqcFFhb2hiVFlzNE5zZ1J6NTlDYloweGVSYThUWHBJRTVtNEE3UytLY2VOTm9EWU9YSHhmN3VpNGRqYWRqQ1pWVGg0VGxSM3lSa091aXo2TFMzbzZ3WlR3MVNRZ3RROXFNMUF5eU1ZcndHL2ZxczlnK2RzZi9FNnNSdFlUdEZLUUhSN3FVdmN6NXNGTEp3SEpOS0lFZFEvaEhSMlA2cm43clJQWHJFZnE3dDhMMk14SXhVZzc4bVN1MlB5NEJkV0dYSHBRakNVa0p4MDBJblJTVkgvSUlaOGtLS2VCdkpHV0UrZmlkbU5aNDRiTllzeVV2V1M3RWNHVGJ3M1J3R0I2d3d0ZHczbWFUb0FLQT09PC9kczpYNTA5Q2VydGlmaWNhdGU+PC9kczpYNTA5RGF0YT48ZHM6S2V5VmFsdWU+PGRzOlJTQUtleVZhbHVlPjxkczpNb2R1bHVzPnpON0oyT3lpVXdodE5RREZmeTJ4MUdFZlVxTkRSbEQrR01Eb1NtMjQvTmlMb0I5aHJCcjlKLzlwc21XSG5vSDNBSFlJNmtEMnF2RW51V2FnU3dwZVV0cmxzdzYvMk9DaTFIeGZNL1ZvYTZBSWF3OFNKMXVDenplSXhVMlVPaFFqWU9JR0RyLzRtcWpwUjlzdEdlOHdKUExmR1hrYmZaTVdvSDBzWXFRYitoZFNFNVRneXlpVmpkRy96Tml1ZXBaU2RxbzEzclBZQjZBVlc4a01jcWdWNHlxUnp5RW53cXQ4RmsxWGFxS1FhTGJuWTdoUk41OWs2N1JDS21tclFTOVFOK3lLMk9PMGJTRjl1VGszekFmRmlCRGxWSG05WEJZK2NXWDd6RHUxaEtac1Zpa3p0UGNiUHR6MFp2Z2ZZRENzYjZiejJ0ZUN1ajBUdzVmN0dZMlpCdz09PC9kczpNb2R1bHVzPjxkczpFeHBvbmVudD5BUUFCPC9kczpFeHBvbmVudD48L2RzOlJTQUtleVZhbHVlPjwvZHM6S2V5VmFsdWU+PC9kczpLZXlJbmZvPjwvZHM6U2lnbmF0dXJlPjxzYW1sOlN1YmplY3Q+PHNhbWw6TmFtZUlEIEZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6MS4xOm5hbWVpZC1mb3JtYXQ6ZW1haWxBZGRyZXNzIj42NWI2N2Q0MS0wMjk2LTQ4ZmItOWU3NS00NzgwZmJiN2VhMzE8L3NhbWw6TmFtZUlEPjxzYW1sOlN1YmplY3RDb25maXJtYXRpb24gTWV0aG9kPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6Y206YmVhcmVyIj48c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uRGF0YSBOb3RPbk9yQWZ0ZXI9IjIwMjMtMDUtMTZUMTg6MDM6MzYuMzU5WiIgUmVjaXBpZW50PSJodHRwczovL2V4YW1wbGUuY29tIiBJblJlc3BvbnNlVG89IklELThhMWYwNmEzLWY0N2UtNDc3Yi1iYWM0LTMxODY2YTlmYjEwMSIvPjwvc2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uPjwvc2FtbDpTdWJqZWN0PjxzYW1sOkNvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDIzLTA1LTE2VDE4OjAxOjM2LjM1OVoiIE5vdE9uT3JBZnRlcj0iMjAyMy0wNS0xNlQxODowMzozNi4zNTlaIj48c2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPjxzYW1sOkF1ZGllbmNlPnNhbWx0ZXN0MTY4NDI2MDA5Mzwvc2FtbDpBdWRpZW5jZT48L3NhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48L3NhbWw6Q29uZGl0aW9ucz48c2FtbDpBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMjMtMDUtMTZUMTg6MDI6MzYuMzYwWiIgU2Vzc2lvbk5vdE9uT3JBZnRlcj0iMjAyMy0wNS0xNlQxODowMzozNi4zNTlaIiBTZXNzaW9uSW5kZXg9IjU1MjI3OTgyLTUzMDEtNDgyYS1hZTE1LWFhODIxYTk5MzkyNCI+PHNhbWw6QXV0aG5Db250ZXh0PjxzYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkUHJvdGVjdGVkVHJhbnNwb3J0PC9zYW1sOkF1dGhuQ29udGV4dENsYXNzUmVmPjxzYW1sOkF1dGhlbnRpY2F0aW5nQXV0aG9yaXR5Pmh0dHBzOi8vYXV0aC5waW5nb25lLmNvbS8wODJkYmE4Ni1kMzZlLTQxM2UtODViNC1lZTQ5OWE1Y2VhNTU8L3NhbWw6QXV0aGVudGljYXRpbmdBdXRob3JpdHk+PC9zYW1sOkF1dGhuQ29udGV4dD48L3NhbWw6QXV0aG5TdGF0ZW1lbnQ+PHNhbWw6QXR0cmlidXRlU3RhdGVtZW50PjxzYW1sOkF0dHJpYnV0ZSBOYW1lPSJzYW1sX3N1YmplY3QiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6YmFzaWMiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhzaTp0eXBlPSJ4czpzdHJpbmciIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSI+NjViNjdkNDEtMDI5Ni00OGZiLTllNzUtNDc4MGZiYjdlYTMxPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU+PC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD48L3NhbWw6QXNzZXJ0aW9uPjwvc2FtbHA6UmVzcG9uc2U+"/>
            <input type="hidden" id="RelayState" name="RelayState" value="token"/>
            <noscript>
                <input type="submit" value="Resume"/>
            </noscript>
        </form>
    </body>
</html>