Tech – Seamless access to two applications SAML protected by Salesforce as IDP and openAM as IDP /IDP Chaining/ Salesforce->OpenAM

Posted on March 28, 2016 by Chenda Mok

Context

  • Heroku WebApp (Application B) is an external web application hosted on Heroku platform
  • Salesforce Org is configured as an Identity Provider (IDP) for the Heroku WebApp
  • EndUser profile page (Application A) is a hosted Web page on OpenAM12. It display the profile of the logged user.
  • OpenAM12 is configured both as an Identity Provider (IDP) and Service Provider (SP)
  • We have two existing identities :
    • user A to access Heroku WebApp in Salesforce Datastore
    • user B to access End User profile page in OpenAM Datastore (embedded open LDAP store)
  • I have linked theses 2 identities using the Federation ID in Salesforce. In my example, I just store the email of the user B in the Federation ID field, matching the UID of the user A in OpenAM. You can use any Subject Type: Federation ID, username, user ID, Custom Attribute, Persistent ID available from Salesforce.

SAML SSO - IDP Chaining- Salesforce to OpenAM

Required Steps

  1. Configure OpenAM as Identity Provider, define the Circle of Trust (cot) and create attributes mapping
  2. Configure Salesforce as Service Provider: activate My Domain, get the OpenAM public certificate, setup the Single Sign On setting, set the Federation ID
  3. Import the Salesforce Metadata into OpenAM and verify/configure the federation settings
  4. Test the Single Sign On – SP initiated login:
    1. Start calling the URL of the Heroku WebApp: https://mysamlherokuapps.herokuapp.com/_saml
    2. You will be redirect to the Login Page of your IDP (Salesforce)
    3. Enter your credentials for your user B
    4. SSO incantation is happening
    5. You are sucessfully logged into your Heroku WebApp
  5. The trick happen here: to ‘link’ your two identities, you need to send a SAML AuthN request to openAM12. You can use this excellent tools to encode/decode your SAML AuthN request.
    1. Open a new tab on the same browser and post this SAML AuthN request (the ID attribute has been remove, otherwise error in OpenAM) 
      <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://cmok.kwaoo.me:8443/OpenAM-12.0.0/Consumer/metaAlias/sp" Destination="https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp" IssueInstant="2016-03-25T21:06:30Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0" >
    <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://cmok.kwaoo.me:8443/OpenAM-12.0.0</saml:Issuer>
</samlp:AuthnRequest>
    2. and post this URL : 
       https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/endpoint/HttpRedirect?SAMLRequest=lZJBT8MwDIXvSPyHqfc2XTsmZLWVChyYtGnTWjhwC53FojVOiVPg59NtTCrSOkFuie18L%2B8lYanrBvLWbWmN7y2yG33pmhgOhdRrLYGRrBhIamRwFRT5Yg5REEJjjTOVqb3rq9GZlTOjdcrQvSFuNdoC7Yeq8Gk9T72tcw2DEJU2u2D3KY0JNMLtZBKLZYOUL%2FxxhwhCcRoWGp3MayVZcDNAfOjkK5J75j8IRbFc40ZZrFwPojZDlBlzizNiJ8mlXhSOp34Y%2B9FNGY0hnEIcvgwMrn78ulO0UfR22dzXYxPDY1mu%2FNWyKAdufUbLhwd3UwMt2fE42WcKB%2Fm2l%2FJlHfKUopf91dFE9EAd%2B7j%2F%2Fcuybw%3D%3D
    3. OK, you can argue that this is not so seamless, and you are right, but we can implement a Javascript code or even an iFrame to post this URL automatically once you are logged into Heroku WebApp. I will leave this as an excercise for now.
    4. the SSO icantation is done on OpenAM side, and you end up in the user profile of the logged user A
    5. Note that your did not provide any credentials for the user A
    6. SAML response: 
      <?xml version="1.0" encoding="UTF-8"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://cmok.kwaoo.me:8443/OpenAM-12.0.0/Consumer/metaAlias/sp" ID="_113c58d9980c8c5983532b46c23cdea41459152539389" IssueInstant="2016-03-28T08:08:59.389Z" Version="2.0">
	<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">https://chendademoidentity-dev-ed.my.salesforce.com</saml:Issuer>
	<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
		<ds:SignedInfo>
			<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
			<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
			<ds:Reference URI="#_113c58d9980c8c5983532b46c23cdea41459152539389">
				<ds:Transforms>
					<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
					<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
						<ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="ds saml samlp xs xsi"/>
					</ds:Transform>
				</ds:Transforms>
				<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
				<ds:DigestValue>xd4GXXel7/DXrmK+mWbtOw3+WqI=</ds:DigestValue>
			</ds:Reference>
		</ds:SignedInfo>
		<ds:SignatureValue>
l2tTl6EztmKq8H0jbfA2d48TabgYsTXdF+V6EgucXMddAzA0BpWv6xNU81fokcIsAfgVT3Tro9km
Vzt4Fvw/lsCpovnJZOrAlW1epBHFEvQiE3vpmAUlb2spaPiGIQf8YmuPaRz3rOAzmWeWGcx2GFLP
zdITKwmlrCGV1eiLSCFQpx28j5OywTOR24IBxH/hzWTqI8NaLMjGBnncz73pgbBLar20NwI1p4/l
yWWsVNikIrpqr/L3SXAQdaCwGNBHGzUNlFDSHh5fsOthumZRFG/TsxLjabSp2pTXAh2qVu62GRdQ
nTMXKyM9JN8HlRfflZp15bvkdmOWEtxPO5prRw==
		</ds:SignatureValue>
		<ds:KeyInfo>
			<ds:X509Data>
				<ds:X509Certificate>MIIErDCCA5SgAwIBAgIOAVLHkeFXAAAAAARi964wDQYJKoZIhvcNAQELBQAwgZAxKDAmBgNVBAMM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</ds:X509Certificate>
			</ds:X509Data>
		</ds:KeyInfo>
	</ds:Signature>
	<samlp:Status>
		<samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
	</samlp:Status>
	<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="_cb3efb960d8fe745398c5172a7906ed21459152539389" IssueInstant="2016-03-28T08:08:59.389Z" Version="2.0">
		<saml:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://chendademoidentity-dev-ed.my.salesforce.com</saml:Issuer>
		<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
			<ds:SignedInfo>
				<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
				<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
				<ds:Reference URI="#_cb3efb960d8fe745398c5172a7906ed21459152539389">
					<ds:Transforms>
						<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
						<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
							<ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="ds saml xs"/>
						</ds:Transform>
					</ds:Transforms>
					<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
					<ds:DigestValue>GHnwcv8zTDEqgXo5UcUWrwLyO38=</ds:DigestValue>
				</ds:Reference>
			</ds:SignedInfo>
			<ds:SignatureValue>
ReRsKZCzVdVbjO+wcatvG1WWjncwajeDUIIsTHuzkzuD7wdztva8F8Wr/tYsxHiaB+C6pZvaMVlz
vJ6Yfi7abQvGT6O5MK8lYWjUWql4XKP33NbouQmSYcBplAMfViIl0A/RkrJ8CGMWPer2f0OPzReL
qrNlYn7USd77qzj5H4Z6+eusqMsVfkxaFzG3FK3qI5mjeVlZu44FQj8o38hpdXQKpHGzudUrT4WF
+JqwVDXSjGzI/7BjyDgiSVic/gdPrcW5UyPX5kysBd6yOPMvX/8tNHUINLjne8Tbfozz9gXsFKWQ
lF9z3jbJqRvw3gw7GvR4qJohmU1yK/ywxuzUJg==
			</ds:SignatureValue>
			<ds:KeyInfo>
				<ds:X509Data>
					<ds:X509Certificate>MIIErDCCA5SgAwIBAgIOAVLHkeFXAAAAAARi964wDQYJKoZIhvcNAQELBQAwgZAxKDAmBgNVBAMM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</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</ds:Signature>
		<saml:Subject xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
			<saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">demo.partner@yopmail.com</saml:NameID>
			<saml:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
				<saml:SubjectConfirmationData NotOnOrAfter="2016-03-28T08:13:59.390Z" Recipient="https://cmok.kwaoo.me:8443/OpenAM-12.0.0/Consumer/metaAlias/sp"/>
			</saml:SubjectConfirmation>
		</saml:Subject>
		<saml:Conditions NotBefore="2016-03-28T08:08:29.390Z" NotOnOrAfter="2016-03-28T08:13:59.390Z" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
			<saml:AudienceRestriction>
				<saml:Audience>https://cmok.kwaoo.me:8443/OpenAM-12.0.0</saml:Audience>
			</saml:AudienceRestriction>
		</saml:Conditions>
		<saml:AuthnStatement AuthnInstant="2016-03-28T08:08:59.389Z" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
			<saml:AuthnContext>
				<saml:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</saml:AuthnContextClassRef>
			</saml:AuthnContext>
		</saml:AuthnStatement>
		<saml:AttributeStatement xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
			<saml:Attribute Name="userId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
				<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:anyType">00558000000TjRD</saml:AttributeValue>
			</saml:Attribute>
			<saml:Attribute Name="username" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
				<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:anyType">demo.partner@yopmail.com</saml:AttributeValue>
			</saml:Attribute>
			<saml:Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
				<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:anyType">demo.partner@yopmail.com</saml:AttributeValue>
			</saml:Attribute>
			<saml:Attribute Name="is_portal_user" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
				<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:anyType">true</saml:AttributeValue>
			</saml:Attribute>
			<saml:Attribute Name="PermissionSets" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
				<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:anyType">[PS_I2P;]</saml:AttributeValue>
			</saml:Attribute>
			<saml:Attribute Name="SSOID" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
				<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:anyType">demo.partner@yopmail.com</saml:AttributeValue>
			</saml:Attribute>
			<saml:Attribute Name="MyCustomAttributes_Username" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
				<saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:anyType">demo.partner@yopmail.com</saml:AttributeValue>
			</saml:Attribute>
		</saml:AttributeStatement>
	</saml:Assertion>
</samlp:Response>

Live HTTP header traffic

Below the HTTP Header capture during this scenario:
Note: you can find in the following message the credentials I have used if you want to tested it by yourself:-)


----------------------------------------------------------
https://mysamlherokuapps.herokuapp.com/_saml

GET /_saml HTTP/1.1
Host: mysamlherokuapps.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive

HTTP/1.1 302 Found
Date: Mon, 28 Mar 2016 08:08:04 GMT
Connection: close
Location: https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/endpoint/HttpRedirect?SAMLRequest=lVJdb8IgFP0rDe%2F0w4%2B2EqtxM4smLjNa97AXw%2BC6kllgQM3270frXNyLyRJCIPeccy%2FnMJ5%2B1sfgBMYKJQuUhDEKQDLFhXwr0K58wDmaTsaW1kdNZo2r5AY%2BGrAu8DxpSVcoUGMkUdQKSyStwRLHyHb2uCK9MCbaKKeYOqJgZi0Y5xvdK2mbGswWzEkw2G1WBaqc05ZEUf3ValZg1HtDtbbh7zFkqo72bRUFcz%2BCkNR1U1%2BorALJKYdaCQ7SCfeFOZzgqDQYDFy06BCaNDwow6CT09Q46V8fCa4jz9ZKSBctvODGEwwwh4LlvED7dDjKWDZI8QCo39gow3nOEzwacN4%2F5EPeTzIPtbaBpbSOSlegXpykOO7jXl7GOWnX8AUF6x8%2F7oQ8u3zLvNczyJJFWa7x%2BmlbouD5kpYHoHM2pGtsrkK5LUsvSaDJf3wfR1fNJufb328x%2BQY%3D
Server: Jetty(7.6.0.v20120127)
Via: 1.1 vegur
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/endpoint/HttpRedirect?SAMLRequest=lVJdb8IgFP0rDe%2F0w4%2B2EqtxM4smLjNa97AXw%2BC6kllgQM3270frXNyLyRJCIPeccy%2FnMJ5%2B1sfgBMYKJQuUhDEKQDLFhXwr0K58wDmaTsaW1kdNZo2r5AY%2BGrAu8DxpSVcoUGMkUdQKSyStwRLHyHb2uCK9MCbaKKeYOqJgZi0Y5xvdK2mbGswWzEkw2G1WBaqc05ZEUf3ValZg1HtDtbbh7zFkqo72bRUFcz%2BCkNR1U1%2BorALJKYdaCQ7SCfeFOZzgqDQYDFy06BCaNDwow6CT09Q46V8fCa4jz9ZKSBctvODGEwwwh4LlvED7dDjKWDZI8QCo39gow3nOEzwacN4%2F5EPeTzIPtbaBpbSOSlegXpykOO7jXl7GOWnX8AUF6x8%2F7oQ8u3zLvNczyJJFWa7x%2BmlbouD5kpYHoHM2pGtsrkK5LUsvSaDJf3wfR1fNJufb328x%2BQY%3D

GET /partners/idp/endpoint/HttpRedirect?SAMLRequest=lVJdb8IgFP0rDe%2F0w4%2B2EqtxM4smLjNa97AXw%2BC6kllgQM3270frXNyLyRJCIPeccy%2FnMJ5%2B1sfgBMYKJQuUhDEKQDLFhXwr0K58wDmaTsaW1kdNZo2r5AY%2BGrAu8DxpSVcoUGMkUdQKSyStwRLHyHb2uCK9MCbaKKeYOqJgZi0Y5xvdK2mbGswWzEkw2G1WBaqc05ZEUf3ValZg1HtDtbbh7zFkqo72bRUFcz%2BCkNR1U1%2BorALJKYdaCQ7SCfeFOZzgqDQYDFy06BCaNDwow6CT09Q46V8fCa4jz9ZKSBctvODGEwwwh4LlvED7dDjKWDZI8QCo39gow3nOEzwacN4%2F5EPeTzIPtbaBpbSOSlegXpykOO7jXl7GOWnX8AUF6x8%2F7oQ8u3zLvNczyJJFWa7x%2BmlbouD5kpYHoHM2pGtsrkK5LUsvSaDJf3wfR1fNJufb328x%2BQY%3D HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg
Connection: keep-alive

HTTP/1.1 302 Moved Temporarily
Date: Mon, 28 Mar 2016 08:08:05 GMT
Cache-Control: s-maxage=0
Location: https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtk&binding=HttpPost&inresponseto=_6597c746-4ea6-4c97-88d1-94dd3f85d317
Content-Length: 0
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtk&binding=HttpPost&inresponseto=_6597c746-4ea6-4c97-88d1-94dd3f85d317

GET /partners/idp/login?app=0sp58000000PAtk&binding=HttpPost&inresponseto=_6597c746-4ea6-4c97-88d1-94dd3f85d317 HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg
Connection: keep-alive

HTTP/1.1 401 Unauthorized
Date: Mon, 28 Mar 2016 08:08:05 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private,s-maxage=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
X-Powered-By: Salesforce.com ApexPages
P3P: CP="CUR OTR STA"
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/login?ec=302&inst=58&startURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317

GET /partners/login?ec=302&inst=58&startURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317 HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtk&binding=HttpPost&inresponseto=_6597c746-4ea6-4c97-88d1-94dd3f85d317
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 28 Mar 2016 08:08:06 GMT
Cache-Control: s-maxage=0
Content-Type: text/html;charset=UTF-8
X-XSS-Protection: 0
X-Frame-Options: DENY
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
----------------------------------------------------------
https://login.salesforce.com/login/sessionserver190.html

GET /login/sessionserver190.html HTTP/1.1
Host: login.salesforce.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chendademoidentity-developer-edition.eu6.force.com/partners/login?ec=302&inst=58&startURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317
Cookie: BrowserId=5vxbIgvqTgerddWiUrm2QA; oinfo="c3RhdHVzPUZyZWUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; sfdc_lv2="KxG83HYi131K4FBstXCPsiTX6b5fqYxDAInXen1YYgFZ6gJt+3ql7/aBJLkpfar14="; autocomplete=1; webact=%7B%22l_vdays%22%3A-1%2C%22l_visit%22%3A1457882924352%2C%22session%22%3A1459092978158%2C%22l_search%22%3A%22%22%2C%22l_dtype%22%3A%22SFDC%20Network%22%2C%22l_page%22%3A%22SFDC%3Aus%3Alogin%3Adeveloper%22%2C%22counter%22%3A1%2C%22pv%22%3A1%2C%22f_visit%22%3A1457882924352%2C%22version%22%3A%22w172.1%22%2C%22developer%22%3A1457882924352%2C%22d%22%3A%2270130000000sUW0%22%2C%22l_cloud%22%3A%22No%20Cloud%22%2C%22seg%22%3A%22non-customer%3Aus%22%7D; s_vi=[CS]v1|2B72C396853120B2-4000010D80002012[CE]; lp=%7B%7D; _ga=GA1.2.1285187319.1459092978
Connection: keep-alive
If-Modified-Since: Mon, 24 Feb 2014 20:02:32 GMT

HTTP/1.1 304 Not Modified
Date: Mon, 28 Mar 2016 08:08:06 GMT
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/login

POST /partners/login HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chendademoidentity-developer-edition.eu6.force.com/partners/login?ec=302&inst=58&startURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 2453
pqs=%3FstartURL%3D%252Fpartners%252Fidp%252Flogin%253Fapp%253D0sp58000000PAtk%2526binding%253DHttpPost%2526inresponseto%253D_6597c746-4ea6-4c97-88d1-94dd3f85d317%26ec%3D302%26inst%3D58&un=demo.partner%40yopmail.com&width=1920&height=1080&hasRememberUn=true&startURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317&loginURL=&loginType=&useSecure=true&local=&lt=standard&qs=r%3Dhttps%253A%252F%252Fchendademoidentity-developer-edition.eu6.force.com%252Fpartners%252Fidp%252Flogin%253Fapp%253D0sp58000000PAtk%2526binding%253DHttpPost%2526inresponseto%253D_6597c746-4ea6-4c97-88d1-94dd3f85d317&locale=&oauth_token=&oauth_callback=&login=&serverid=&display=page&username=demo.partner%40yopmail.com&ExtraLog=%255B%257B%2522width%2522%3A1920%257D%2C%257B%2522height%2522%3A1080%257D%2C%257B%2522language%2522%3A%2522en-US%2522%257D%2C%257B%2522offset%2522%3A-2%257D%2C%257B%2522scripts%2522%3A%255B%257B%2522size%2522%3A249%2C%2522summary%2522%3A%2522if%2520%28self%2520%3D%3D%2520top%29%2520%257Bdocument.documentElement.style.v%2522%257D%2C%257B%2522size%2522%3A556%2C%2522summary%2522%3A%2522var%2520SFDCSessionVars%3D%257B%255C%2522server%255C%2522%3A%255C%2522https%3A%2F%2Flogin.sales%2522%257D%2C%257B%2522url%2522%3A%2522https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fjslibrary%2FSfdcSessionBase198.js%2522%257D%2C%257B%2522url%2522%3A%2522https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fjslibrary%2FLoginHint198.js%2522%257D%2C%257B%2522size%2522%3A26%2C%2522summary%2522%3A%2522LoginHint.hideLoginForm%28%29%3B%2522%257D%2C%257B%2522size%2522%3A36%2C%2522summary%2522%3A%2522LoginHint.getSavedIdentities%28false%29%3B%2522%257D%2C%257B%2522url%2522%3A%2522https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fjslibrary%2Fbaselogin2.js%2522%257D%2C%257B%2522url%2522%3A%2522https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fjslibrary%2FLoginMarketingSurveyResponse.js%2522%257D%2C%257B%2522size%2522%3A262%2C%2522summary%2522%3A%2522function%2520handleLogin%28%29%257Bdocument.login.un.value%3Ddoc%2522%257D%255D%257D%2C%257B%2522scriptCount%2522%3A9%257D%2C%257B%2522iframes%2522%3A%255B%2522https%3A%2F%2Flogin.salesforce.com%2Flogin%2Fsessionserver190.html%2522%255D%257D%2C%257B%2522iframeCount%2522%3A1%257D%255D&pw=Welcome2016&Login=Log+In&rememberUn=on
HTTP/1.1 200 OK
Date: Mon, 28 Mar 2016 08:08:25 GMT
Cache-Control: s-maxage=0
Content-Type: text/html;charset=UTF-8
X-XSS-Protection: 0
X-Frame-Options: DENY
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/login

POST /partners/login HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chendademoidentity-developer-edition.eu6.force.com/partners/login
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 2764
pqs=%3FstartURL%3D%252Fpartners%252Fidp%252Flogin%253Fapp%253D0sp58000000PAtk%2526binding%253DHttpPost%2526inresponseto%253D_6597c746-4ea6-4c97-88d1-94dd3f85d317%26ec%3D302%26inst%3D58&un=demo.partner%40yopmail.com&width=1920&height=1080&hasRememberUn=true&startURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317&loginURL=null&loginType=&useSecure=true&local=&lt=standard&qs=r%3Dhttps%253A%252F%252Fchendademoidentity-developer-edition.eu6.force.com%252Fpartners%252Fidp%252Flogin%253Fapp%253D0sp58000000PAtk%2526binding%253DHttpPost%2526inresponseto%253D_6597c746-4ea6-4c97-88d1-94dd3f85d317%26r%3Dhttps%253A%252F%252Fchendademoidentity-developer-edition.eu6.force.com%252Fpartners%252Flogin%253Fec%253D302%2526inst%253D58%2526startURL%253D%25252Fpartners%25252Fidp%25252Flogin%25253Fapp%25253D0sp58000000PAtk%252526binding%25253DHttpPost%252526inresponseto%25253D_6597c746-4ea6-4c97-88d1-94dd3f85d317&locale=&oauth_token=&oauth_callback=&login=&serverid=&display=page&username=demo.partner%40yopmail.com&ExtraLog=%255B%257B%2522width%2522%3A1920%257D%2C%257B%2522height%2522%3A1080%257D%2C%257B%2522language%2522%3A%2522en-US%2522%257D%2C%257B%2522offset%2522%3A-2%257D%2C%257B%2522scripts%2522%3A%255B%257B%2522size%2522%3A249%2C%2522summary%2522%3A%2522if%2520%28self%2520%3D%3D%2520top%29%2520%257Bdocument.documentElement.style.v%2522%257D%2C%257B%2522size%2522%3A587%2C%2522summary%2522%3A%2522var%2520SFDCSessionVars%3D%257B%255C%2522server%255C%2522%3A%255C%2522https%3A%2F%2Flogin.sales%2522%257D%2C%257B%2522url%2522%3A%2522https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fjslibrary%2FSfdcSessionBase198.js%2522%257D%2C%257B%2522url%2522%3A%2522https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fjslibrary%2FLoginHint198.js%2522%257D%2C%257B%2522size%2522%3A26%2C%2522summary%2522%3A%2522LoginHint.hideLoginForm%28%29%3B%2522%257D%2C%257B%2522size%2522%3A36%2C%2522summary%2522%3A%2522LoginHint.getSavedIdentities%28false%29%3B%2522%257D%2C%257B%2522url%2522%3A%2522https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fjslibrary%2Fbaselogin2.js%2522%257D%2C%257B%2522url%2522%3A%2522https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fjslibrary%2FLoginMarketingSurveyResponse.js%2522%257D%2C%257B%2522size%2522%3A262%2C%2522summary%2522%3A%2522function%2520handleLogin%28%29%257Bdocument.login.un.value%3Ddoc%2522%257D%255D%257D%2C%257B%2522scriptCount%2522%3A9%257D%2C%257B%2522iframes%2522%3A%255B%2522https%3A%2F%2Flogin.salesforce.com%2Flogin%2Fsessionserver190.html%2522%255D%257D%2C%257B%2522iframeCount%2522%3A1%257D%255D&pw=Welcome1&Login=Log+In&rememberUn=on
HTTP/1.1 302 Moved Temporarily
Date: Mon, 28 Mar 2016 08:08:30 GMT
Cache-Control: s-maxage=0
Content-Type: text/html;charset=UTF-8
Set-Cookie: oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U=";Path=/;Domain=.force.com;Expires=Fri, 27-May-2016 08:08:30 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://chendademoidentity-developer-edition.eu6.force.com/partners/secur/frontdoor.jsp?sid=00D58000000KKGe%21AQMAQOq7x00yBvmob5Jaki1z_muXgy.P_DYu9sfi3RSomOBgD8TSfMuMGwaP8DaLrAjazFlDVUgjkoqEIo0OGeGn9FOrd2pP&retURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317&apv=1&untethered=&cshc=8000000TjRD8000000KKGe&refURL=https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fsecur%2Ffrontdoor.jsp
Content-Length: 0
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/secur/frontdoor.jsp?sid=00D58000000KKGe%21AQMAQOq7x00yBvmob5Jaki1z_muXgy.P_DYu9sfi3RSomOBgD8TSfMuMGwaP8DaLrAjazFlDVUgjkoqEIo0OGeGn9FOrd2pP&retURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317&apv=1&untethered=&cshc=8000000TjRD8000000KKGe&refURL=https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fsecur%2Ffrontdoor.jsp

GET /partners/secur/frontdoor.jsp?sid=00D58000000KKGe%21AQMAQOq7x00yBvmob5Jaki1z_muXgy.P_DYu9sfi3RSomOBgD8TSfMuMGwaP8DaLrAjazFlDVUgjkoqEIo0OGeGn9FOrd2pP&retURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317&apv=1&untethered=&cshc=8000000TjRD8000000KKGe&refURL=https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fsecur%2Ffrontdoor.jsp HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chendademoidentity-developer-edition.eu6.force.com/partners/login
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 28 Mar 2016 08:08:30 GMT
Set-Cookie: sfdc_lv2="KxG83HAViw4raMrY8bSWmT2c3nwlMwG+fM+VQTuI+jjMr/fRZMdQlMaCRnxsgSsuU=";Path=/;Domain=.salesforce.com;Expires=Wed, 28-Mar-2018 08:08:30 GMT
Set-Cookie: autocomplete=1;Path=/;Domain=.force.com;Expires=Fri, 27-May-2016 08:08:30 GMT
Set-Cookie: lloopch_loid=;Path=/;Domain=chendademoidentity-developer-edition.eu6.force.com;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Secure
Set-Cookie: lloopch_lpid=;Path=/;Domain=chendademoidentity-developer-edition.eu6.force.com;Expires=Thu, 01-Jan-1970 00:00:00 GMT;Secure
Set-Cookie: sid=00D58000000KKGe!AQMAQDI.y.52z7S5mhXeaH_NWvqDJmu6RMcSsTzWlWgKDwJcNmT19Ww_h9pnVEcEqSJxFlBdTOCIxngfMMsYkJJYKqI4rihW; domain=chendademoidentity-developer-edition.eu6.force.com; path=/; secure
Set-Cookie: sid_Client=8000000TjRD8000000KKGe;Path=/;Domain=chendademoidentity-developer-edition.eu6.force.com;Secure
Set-Cookie: clientSrc=185.45.35.179;Path=/;Domain=chendademoidentity-developer-edition.eu6.force.com;Secure
Set-Cookie: inst=APP_58;Path=/;Domain=.force.com
Set-Cookie: oid=00D58000000KKGe;Path=/;Domain=chendademoidentity-developer-edition.eu6.force.com;Expires=Wed, 28-Mar-2018 08:08:30 GMT;Secure
X-Robots-Tag: nofollow, noindex, noarchive, nosnippet
Pragma: no-cache
Cache-Control: no-cache, no-store,s-maxage=0, no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=ISO-8859-1
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtk&binding=HttpPost&inresponseto=_6597c746-4ea6-4c97-88d1-94dd3f85d317

GET /partners/idp/login?app=0sp58000000PAtk&binding=HttpPost&inresponseto=_6597c746-4ea6-4c97-88d1-94dd3f85d317 HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chendademoidentity-developer-edition.eu6.force.com/partners/secur/frontdoor.jsp?sid=00D58000000KKGe%21AQMAQOq7x00yBvmob5Jaki1z_muXgy.P_DYu9sfi3RSomOBgD8TSfMuMGwaP8DaLrAjazFlDVUgjkoqEIo0OGeGn9FOrd2pP&retURL=%2Fpartners%2Fidp%2Flogin%3Fapp%3D0sp58000000PAtk%26binding%3DHttpPost%26inresponseto%3D_6597c746-4ea6-4c97-88d1-94dd3f85d317&apv=1&untethered=&cshc=8000000TjRD8000000KKGe&refURL=https%3A%2F%2Fchendademoidentity-developer-edition.eu6.force.com%2Fpartners%2Fsecur%2Ffrontdoor.jsp
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg; sid=00D58000000KKGe!AQMAQDI.y.52z7S5mhXeaH_NWvqDJmu6RMcSsTzWlWgKDwJcNmT19Ww_h9pnVEcEqSJxFlBdTOCIxngfMMsYkJJYKqI4rihW; sid_Client=8000000TjRD8000000KKGe; clientSrc=185.45.35.179; inst=APP_58
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 28 Mar 2016 08:08:31 GMT
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html;charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
----------------------------------------------------------
https://mysamlherokuapps.herokuapp.com/_saml

POST /_saml HTTP/1.1
Host: mysamlherokuapps.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtk&binding=HttpPost&inresponseto=_6597c746-4ea6-4c97-88d1-94dd3f85d317
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 12979
SAMLResponse=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgRGVzdGluYXRpb249Imh0dHBzOi8vbXlzYW1saGVyb2t1YXBwcy5oZXJva3VhcHAuY29tL19zYW1sIiBJRD0iXzY0Nzg1MGY3MTQ1NWZiY2YxZjJkNTI0ZjNjMWYxZTgwMTQ1OTE1MjUxMTE3OSIgSW5SZXNwb25zZVRvPSJfNjU5N2M3NDYtNGVhNi00Yzk3LTg4ZDEtOTRkZDNmODVkMzE3IiBJc3N1ZUluc3RhbnQ9IjIwMTYtMDMtMjhUMDg6MDg6MzEuMTc5WiIgVmVyc2lvbj0iMi4wIj48c2FtbDpJc3N1ZXIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6bmFtZWlkLWZvcm1hdDplbnRpdHkiPmh0dHBzOi8vY2hlbmRhZGVtb2lkZW50aXR5LWRldi1lZC5teS5zYWxlc2ZvcmNlLmNvbTwvc2FtbDpJc3N1ZXI%2BPGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI%2BCjxkczpTaWduZWRJbmZvPgo8ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPgo8ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3JzYS1zaGExIi8%2BCjxkczpSZWZlcmVuY2UgVVJJPSIjXzY0Nzg1MGY3MTQ1NWZiY2YxZjJkNTI0ZjNjMWYxZTgwMTQ1OTE1MjUxMTE3OSI%2BCjxkczpUcmFuc2Zvcm1zPgo8ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI2VudmVsb3BlZC1zaWduYXR1cmUiLz4KPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyI%2BPGVjOkluY2x1c2l2ZU5hbWVzcGFjZXMgeG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIgUHJlZml4TGlzdD0iZHMgc2FtbCBzYW1scCB4cyB4c2kiLz48L2RzOlRyYW5zZm9ybT4KPC9kczpUcmFuc2Zvcm1zPgo8ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz4KPGRzOkRpZ2VzdFZhbHVlPi9lNHQ2ZDBEdHgxQ284ay9jckR6My9yYmFpaz08L2RzOkRpZ2VzdFZhbHVlPgo8L2RzOlJlZmVyZW5jZT4KPC9kczpTaWduZWRJbmZvPgo8ZHM6U2lnbmF0dXJlVmFsdWU%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%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%2BPC9kczpYNTA5RGF0YT48L2RzOktleUluZm8%2BPC9kczpTaWduYXR1cmU%2BPHNhbWxwOlN0YXR1cz48c2FtbHA6U3RhdHVzQ29kZSBWYWx1ZT0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOnN0YXR1czpTdWNjZXNzIi8%2BPC9zYW1scDpTdGF0dXM%2BPHNhbWw6QXNzZXJ0aW9uIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIElEPSJfZjg4NWRlNzQ3OWYzMjdkMDE1NTFkMDVmZWIyYWFlNzAxNDU5MTUyNTExMTc5IiBJc3N1ZUluc3RhbnQ9IjIwMTYtMDMtMjhUMDg6MDg6MzEuMTc5WiIgVmVyc2lvbj0iMi4wIj48c2FtbDpJc3N1ZXIgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6bmFtZWlkLWZvcm1hdDplbnRpdHkiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iPmh0dHBzOi8vY2hlbmRhZGVtb2lkZW50aXR5LWRldi1lZC5teS5zYWxlc2ZvcmNlLmNvbTwvc2FtbDpJc3N1ZXI%2BPGRzOlNpZ25hdHVyZSB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI%2BCjxkczpTaWduZWRJbmZvPgo8ZHM6Q2Fub25pY2FsaXphdGlvbk1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPgo8ZHM6U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3JzYS1zaGExIi8%2BCjxkczpSZWZlcmVuY2UgVVJJPSIjX2Y4ODVkZTc0NzlmMzI3ZDAxNTUxZDA1ZmViMmFhZTcwMTQ1OTE1MjUxMTE3OSI%2BCjxkczpUcmFuc2Zvcm1zPgo8ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI2VudmVsb3BlZC1zaWduYXR1cmUiLz4KPGRzOlRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyI%2BPGVjOkluY2x1c2l2ZU5hbWVzcGFjZXMgeG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIgUHJlZml4TGlzdD0iZHMgc2FtbCB4cyIvPjwvZHM6VHJhbnNmb3JtPgo8L2RzOlRyYW5zZm9ybXM%2BCjxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjc2hhMSIvPgo8ZHM6RGlnZXN0VmFsdWU%2BY3A0dy9VNG1GeEJSVks4TC9QeUlnK3ljWFdVPTwvZHM6RGlnZXN0VmFsdWU%2BCjwvZHM6UmVmZXJlbmNlPgo8L2RzOlNpZ25lZEluZm8%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%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%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%2BPHNhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY%2BdXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6dW5zcGVjaWZpZWQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY%2BPC9zYW1sOkF1dGhuQ29udGV4dD48L3NhbWw6QXV0aG5TdGF0ZW1lbnQ%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%2BPHNhbWw6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4c2k6dHlwZT0ieHM6YW55VHlwZSI%2BZGVtby5wYXJ0bmVyQHlvcG1haWwuY29tPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU%2BPHNhbWw6QXR0cmlidXRlIE5hbWU9ImVtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OnVuc3BlY2lmaWVkIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhzaTp0eXBlPSJ4czphbnlUeXBlIj5kZW1vLnBhcnRuZXJAeW9wbWFpbC5jb208L3NhbWw6QXR0cmlidXRlVmFsdWU%2BPC9zYW1sOkF0dHJpYnV0ZT48c2FtbDpBdHRyaWJ1dGUgTmFtZT0iaXNfcG9ydGFsX3VzZXIiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6dW5zcGVjaWZpZWQiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgeHNpOnR5cGU9InhzOmFueVR5cGUiPnRydWU8L3NhbWw6QXR0cmlidXRlVmFsdWU%2BPC9zYW1sOkF0dHJpYnV0ZT48c2FtbDpBdHRyaWJ1dGUgTmFtZT0iVXNlcl9UaXRsZSIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDp1bnNwZWNpZmllZCI%2BPHNhbWw6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4c2k6dHlwZT0ieHM6YW55VHlwZSIvPjwvc2FtbDpBdHRyaWJ1dGU%2BPHNhbWw6QXR0cmlidXRlIE5hbWU9IlVzZXJfQ29tcGFueU5hbWUiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6dW5zcGVjaWZpZWQiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgeHNpOnR5cGU9InhzOmFueVR5cGUiLz48L3NhbWw6QXR0cmlidXRlPjwvc2FtbDpBdHRyaWJ1dGVTdGF0ZW1lbnQ%2BPC9zYW1sOkFzc2VydGlvbj48L3NhbWxwOlJlc3BvbnNlPg%3D%3D
HTTP/1.1 302 Found
Date: Mon, 28 Mar 2016 08:08:32 GMT
Connection: close
Set-Cookie: IDENTITY=eyJVc2VyX0NvbXBhbnlOYW1lIjpbIiJdLCJ1c2VybmFtZSI6WyJkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iXSwiaXNfcG9ydGFsX3VzZXIiOlsidHJ1ZSJdLCJlbWFpbCI6WyJkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iXSwic3ViamVjdCI6IjAwRDU4MDAwMDAwS0tHZUBkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iLCJ1c2VySWQiOlsiMDA1NTgwMDAwMDBUalJEIl0sIlVzZXJfVGl0bGUiOlsiIl19
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: http://mysamlherokuapps.herokuapp.com/
Server: Jetty(7.6.0.v20120127)
Via: 1.1 vegur
----------------------------------------------------------
http://mysamlherokuapps.herokuapp.com/

GET / HTTP/1.1
Host: mysamlherokuapps.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: IDENTITY=eyJVc2VyX0NvbXBhbnlOYW1lIjpbIiJdLCJ1c2VybmFtZSI6WyJkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iXSwiaXNfcG9ydGFsX3VzZXIiOlsidHJ1ZSJdLCJlbWFpbCI6WyJkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iXSwic3ViamVjdCI6IjAwRDU4MDAwMDAwS0tHZUBkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iLCJ1c2VySWQiOlsiMDA1NTgwMDAwMDBUalJEIl0sIlVzZXJfVGl0bGUiOlsiIl19
Connection: keep-alive

HTTP/1.1 302 Found
Date: Mon, 28 Mar 2016 08:08:31 GMT
Connection: close
Location: https://mysamlherokuapps.herokuapp.com/
Server: Jetty(7.6.0.v20120127)
Via: 1.1 vegur
----------------------------------------------------------
https://mysamlherokuapps.herokuapp.com/

GET / HTTP/1.1
Host: mysamlherokuapps.herokuapp.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: IDENTITY=eyJVc2VyX0NvbXBhbnlOYW1lIjpbIiJdLCJ1c2VybmFtZSI6WyJkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iXSwiaXNfcG9ydGFsX3VzZXIiOlsidHJ1ZSJdLCJlbWFpbCI6WyJkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iXSwic3ViamVjdCI6IjAwRDU4MDAwMDAwS0tHZUBkZW1vLnBhcnRuZXJAeW9wbWFpbC5jb20iLCJ1c2VySWQiOlsiMDA1NTgwMDAwMDBUalJEIl0sIlVzZXJfVGl0bGUiOlsiIl19
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 28 Mar 2016 08:08:33 GMT
Connection: close
Set-Cookie: JSESSIONID=1t5manbjakgzl7a5mp13iuyeu;Path=/
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=ISO-8859-1
Server: Jetty(7.6.0.v20120127)
Via: 1.1 vegur
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtp&binding=HttpPost

GET /partners/idp/login?app=0sp58000000PAtp&binding=HttpPost HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 401 Unauthorized
Date: Mon, 28 Mar 2016 08:08:50 GMT
Set-Cookie: BrowserId=aCJ_CykhTMS18_X7kk8KGA;Path=/;Domain=.force.com;Expires=Fri, 27-May-2016 08:08:50 GMT
Cache-Control: no-cache, must-revalidate, max-age=0, no-store, private,s-maxage=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
X-Powered-By: Salesforce.com ApexPages
P3P: CP="CUR OTR STA"
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/endpoint/HttpRedirect?SAMLRequest=lZJBT8MwDIXvSPyHqfc2XTsmZLWVChyYtGnTWjhwC53FojVOiVPg59NtTCrSOkFuie18L%2B8lYanrBvLWbWmN7y2yG33pmhgOhdRrLYGRrBhIamRwFRT5Yg5REEJjjTOVqb3rq9GZlTOjdcrQvSFuNdoC7Yeq8Gk9T72tcw2DEJU2u2D3KY0JNMLtZBKLZYOUL%2FxxhwhCcRoWGp3MayVZcDNAfOjkK5J75j8IRbFc40ZZrFwPojZDlBlzizNiJ8mlXhSOp34Y%2B9FNGY0hnEIcvgwMrn78ulO0UfR22dzXYxPDY1mu%2FNWyKAdufUbLhwd3UwMt2fE42WcKB%2Fm2l%2FJlHfKUopf91dFE9EAd%2B7j%2F%2Fcuybw%3D%3D

GET /partners/idp/endpoint/HttpRedirect?SAMLRequest=lZJBT8MwDIXvSPyHqfc2XTsmZLWVChyYtGnTWjhwC53FojVOiVPg59NtTCrSOkFuie18L%2B8lYanrBvLWbWmN7y2yG33pmhgOhdRrLYGRrBhIamRwFRT5Yg5REEJjjTOVqb3rq9GZlTOjdcrQvSFuNdoC7Yeq8Gk9T72tcw2DEJU2u2D3KY0JNMLtZBKLZYOUL%2FxxhwhCcRoWGp3MayVZcDNAfOjkK5J75j8IRbFc40ZZrFwPojZDlBlzizNiJ8mlXhSOp34Y%2B9FNGY0hnEIcvgwMrn78ulO0UfR22dzXYxPDY1mu%2FNWyKAdufUbLhwd3UwMt2fE42WcKB%2Fm2l%2FJlHfKUopf91dFE9EAd%2B7j%2F%2Fcuybw%3D%3D HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg; sid=00D58000000KKGe!AQMAQDI.y.52z7S5mhXeaH_NWvqDJmu6RMcSsTzWlWgKDwJcNmT19Ww_h9pnVEcEqSJxFlBdTOCIxngfMMsYkJJYKqI4rihW; sid_Client=8000000TjRD8000000KKGe; clientSrc=185.45.35.179; inst=APP_58
Connection: keep-alive

HTTP/1.1 302 Moved Temporarily
Date: Mon, 28 Mar 2016 08:08:59 GMT
Cache-Control: private
Location: https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtp&binding=HttpPost
Content-Length: 0
----------------------------------------------------------
https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtp&binding=HttpPost

GET /partners/idp/login?app=0sp58000000PAtp&binding=HttpPost HTTP/1.1
Host: chendademoidentity-developer-edition.eu6.force.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cookie: BrowserId=zaFSJQP4QtaTv-vu-zlUIA; oinfo="c3RhdHVzPUZSRUUmdHlwZT0zJm9pZD0wMEQ1ODAwMDAwMEtLR2U="; autocomplete=1; oid=00D58000000KKGe; logouturl=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/; ssostartpage=https://cmok.kwaoo.me:8443/OpenAM-12.0.0/SSORedirect/metaAlias/idp; saml_request_id=_2CAAAAVRHbvGLME8wNTgwMDAwMDA0Qzk2AAAAyK9JVRbSDwgiQNIBRIEvJ8yBCR6TDdhOB2xAxyOmpEsDRkWcHkDBB0U3CuLNh6_Z6vSL94vmyH8RYpgZFlYwGzFChWHcQkX-t0DbEKo_UTBDJyfBjqFXA_0_DfeRJd8dKIRjlGZkebXa_QfE2TnxKRQV_-ivR0hLqo_adQWmCgocYLWCvLkn0fAV6ge_f-CKyJGarCMS7sIhCXa3N7WWdzJff87Piqq5_gQgg3tHK8pL5ulSYvydkb3caZ3w3CwZsg; sid=00D58000000KKGe!AQMAQDI.y.52z7S5mhXeaH_NWvqDJmu6RMcSsTzWlWgKDwJcNmT19Ww_h9pnVEcEqSJxFlBdTOCIxngfMMsYkJJYKqI4rihW; sid_Client=8000000TjRD8000000KKGe; clientSrc=185.45.35.179; inst=APP_58
Connection: keep-alive

HTTP/1.1 200 OK
Date: Mon, 28 Mar 2016 08:08:59 GMT
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html;charset=UTF-8
Content-Encoding: gzip
Vary: Accept-Encoding
Transfer-Encoding: chunked
----------------------------------------------------------
https://cmok.kwaoo.me:8443/OpenAM-12.0.0/Consumer/metaAlias/sp

POST /OpenAM-12.0.0/Consumer/metaAlias/sp HTTP/1.1
Host: cmok.kwaoo.me:8443
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://chendademoidentity-developer-edition.eu6.force.com/partners/idp/login?app=0sp58000000PAtp&binding=HttpPost
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 13377
SAMLResponse=PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48c2FtbHA6UmVzcG9uc2UgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCIgRGVzdGluYXRpb249Imh0dHBzOi8vY21vay5rd2Fvby5tZTo4NDQzL09wZW5BTS0xMi4wLjAvQ29uc3VtZXIvbWV0YUFsaWFzL3NwIiBJRD0iXzExM2M1OGQ5OTgwYzhjNTk4MzUzMmI0NmMyM2NkZWE0MTQ1OTE1MjUzOTM4OSIgSXNzdWVJbnN0YW50PSIyMDE2LTAzLTI4VDA4OjA4OjU5LjM4OVoiIFZlcnNpb249IjIuMCI%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%2BCjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiPjxlYzpJbmNsdXNpdmVOYW1lc3BhY2VzIHhtbG5zOmVjPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiIFByZWZpeExpc3Q9ImRzIHNhbWwgc2FtbHAgeHMgeHNpIi8%2BPC9kczpUcmFuc2Zvcm0%2BCjwvZHM6VHJhbnNmb3Jtcz4KPGRzOkRpZ2VzdE1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNzaGExIi8%2BCjxkczpEaWdlc3RWYWx1ZT54ZDRHWFhlbDcvRFhybUsrbVdidE93MytXcUk9PC9kczpEaWdlc3RWYWx1ZT4KPC9kczpSZWZlcmVuY2U%2BCjwvZHM6U2lnbmVkSW5mbz4KPGRzOlNpZ25hdHVyZVZhbHVlPgpsMnRUbDZFenRtS3E4SDBqYmZBMmQ0OFRhYmdZc1RYZEYrVjZFZ3VjWE1kZEF6QTBCcFd2NnhOVTgxZm9rY0lzQWZnVlQzVHJvOWttClZ6dDRGdncvbHNDcG92bkpaT3JBbFcxZXBCSEZFdlFpRTN2cG1BVWxiMnNwYVBpR0lRZjhZbXVQYVJ6M3JPQXptV2VXR2N4MkdGTFAKemRJVEt3bWxyQ0dWMWVpTFNDRlFweDI4ajVPeXdUT1IyNElCeEgvaHpXVHFJOE5hTE1qR0JubmN6NzNwZ2JCTGFyMjBOd0kxcDQvbAp5V1dzVk5pa0lycHFyL0wzU1hBUWRhQ3dHTkJIR3pVTmxGRFNIaDVmc090aHVtWlJGRy9Uc3hMamFiU3AycFRYQWgycVZ1NjJHUmRRCm5UTVhLeU05Sk44SGxSZmZsWnAxNWJ2a2RtT1dFdHhQTzVwclJ3PT0KPC9kczpTaWduYXR1cmVWYWx1ZT4KPGRzOktleUluZm8%2BPGRzOlg1MDlEYXRhPjxkczpYNTA5Q2VydGlmaWNhdGU%2BTUlJRXJEQ0NBNVNnQXdJQkFnSU9BVkxIa2VGWEFBQUFBQVJpOTY0d0RRWUpLb1pJaHZjTkFRRUxCUUF3Z1pBeEtEQW1CZ05WQkFNTQpIMU5sYkdaVGFXZHVaV1JEWlhKMFh6QTVSbVZpTWpBeE5sOHhPVFEyTVRJeEdEQVdCZ05WQkFzTUR6QXdSRFU0TURBd01EQXdTMHRIClpURVhNQlVHQTFVRUNnd09VMkZzWlhObWIzSmpaUzVqYjIweEZqQVVCZ05WQkFjTURWTmhiaUJHY21GdVkybHpZMjh4Q3pBSkJnTlYKQkFnTUFrTkJNUXd3Q2dZRFZRUUdFd05WVTBFd0hoY05NVFl3TWpBNU1UazBOakV5V2hjTk1UZ3dNakE1TVRJd01EQXdXakNCa0RFbwpNQ1lHQTFVRUF3d2ZVMlZzWmxOcFoyNWxaRU5sY25SZk1EbEdaV0l5TURFMlh6RTVORFl4TWpFWU1CWUdBMVVFQ3d3UE1EQkVOVGd3Ck1EQXdNREJMUzBkbE1SY3dGUVlEVlFRS0RBNVRZV3hsYzJadmNtTmxMbU52YlRFV01CUUdBMVVFQnd3TlUyRnVJRVp5WVc1amFYTmoKYnpFTE1Ba0dBMVVFQ0F3Q1EwRXhEREFLQmdOVkJBWVRBMVZUUVRDQ0FTSXdEUVlKS29aSWh2Y05BUUVCQlFBRGdnRVBBRENDQVFvQwpnZ0VCQUtjTk9QdVI1SFl0YldEay81OE9vN2x3aEMvRDJ2dy9xaUkreWJoS0pvbzExS0N5Ykowd29hMEdzUUZLcjgwL1N0OEdmV2xCCnJPSFRjbng1dzdPUXZqVGl0NklSbjZJVU1yN3RwNms0azVFcWErQlBRYjZzREZZNjBUTXJ6NGZSQXJ2QVhqalRaS3p4NGxVTlNXSXEKbnlQVUZId01yaUhGeHpveWwwWlhWSVRsNjA5VEpnM3djNDFvR296Rk5uRUMzbEZ6dVo1b2VOY0Q4MTZ5NDNtbmJWRzlLbDZqYXVvMgpiTG5VWTF4dm1hemxLN3Z2VS8wSFFMa0RHRGhFcXoza2lnNEY1YURNaW54ZzdiTVRtM3hGbVBHanIrZVR3cnIwS3dDWC9wQnhUd00vClVkMEhybUtRTTJsVEVyaEE4M3J3OG9ZYlJ6cUNtOWdsWmJRaFpIM3FLcjhDQXdFQUFhT0NBUUF3Z2Ywd0hRWURWUjBPQkJZRUZHdWUKc0ZXd3V5VTlJTWFIUUhySUZYR2dsZ1dITUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3Z2NvR0ExVWRJd1NCd2pDQnY0QVVhNTZ3VmJDNwpKVDBneG9kQWVzZ1ZjYUNXQlllaGdaYWtnWk13Z1pBeEtEQW1CZ05WQkFNTUgxTmxiR1pUYVdkdVpXUkRaWEowWHpBNVJtVmlNakF4Ck5sOHhPVFEyTVRJeEdEQVdCZ05WQkFzTUR6QXdSRFU0TURBd01EQXdTMHRIWlRFWE1CVUdBMVVFQ2d3T1UyRnNaWE5tYjNKalpTNWoKYjIweEZqQVVCZ05WQkFjTURWTmhiaUJHY21GdVkybHpZMjh4Q3pBSkJnTlZCQWdNQWtOQk1Rd3dDZ1lEVlFRR0V3TlZVMEdDRGdGUwp4NUhoVndBQUFBQUVZdmV1TUEwR0NTcUdTSWIzRFFFQkN3VUFBNElCQVFBSU1zWCtGM1JYMjJkdVhrUnNVTk4vYURxRGlRb3FjdXJECmlNeVdiZnU4eXRNby8zQ0MvNWMwQmM0ejgwVUltTG5vcU1IWGtJYzRaZzVVL0pPUCtEVGNGamdabFQ2VDBxQmNOTWhrVzhPdVlydDQKQ1lJMks5WlVaRktleVkxVFBXcVpiS1pXR29Zc01lc0FNSGR3VlVkRFFrU1J5c1V6a21ramdVZVYwcnNjMENtczNFN1gzUnVlUzh5aQpMREpWUkJpWmtUeDdsMzc1Q29kVWNFR0pWTjJMeUY2SWM4eHkyYy9KbkdCZmZVVlVzdEpjWTk3d3Vtck5ySDdzQ0JhR2ZtS0lsSllTCkNwSUdraU5tRU5vWFUwUExFNUNmWlJFdk5YZjBFYmdBLzQwV2JZdEtQa2xCT0xTRXZBRlVBaXk5Wi9jOS9iaXVCNTg4eWl3ckN0dWEKTmpDQTwvZHM6WDUwOUNlcnRpZmljYXRlPjwvZHM6WDUwOURhdGE%2BPC9kczpLZXlJbmZvPjwvZHM6U2lnbmF0dXJlPjxzYW1scDpTdGF0dXM%2BPHNhbWxwOlN0YXR1c0NvZGUgVmFsdWU9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpzdGF0dXM6U3VjY2VzcyIvPjwvc2FtbHA6U3RhdHVzPjxzYW1sOkFzc2VydGlvbiB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIiBJRD0iX2NiM2VmYjk2MGQ4ZmU3NDUzOThjNTE3MmE3OTA2ZWQyMTQ1OTE1MjUzOTM4OSIgSXNzdWVJbnN0YW50PSIyMDE2LTAzLTI4VDA4OjA4OjU5LjM4OVoiIFZlcnNpb249IjIuMCI%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%2BCjxkczpUcmFuc2Zvcm0gQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiPjxlYzpJbmNsdXNpdmVOYW1lc3BhY2VzIHhtbG5zOmVjPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiIFByZWZpeExpc3Q9ImRzIHNhbWwgeHMiLz48L2RzOlRyYW5zZm9ybT4KPC9kczpUcmFuc2Zvcm1zPgo8ZHM6RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI3NoYTEiLz4KPGRzOkRpZ2VzdFZhbHVlPkdIbndjdjh6VERFcWdYbzVVY1VXcndMeU8zOD08L2RzOkRpZ2VzdFZhbHVlPgo8L2RzOlJlZmVyZW5jZT4KPC9kczpTaWduZWRJbmZvPgo8ZHM6U2lnbmF0dXJlVmFsdWU%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%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%2BPC9kczpYNTA5RGF0YT48L2RzOktleUluZm8%2BPC9kczpTaWduYXR1cmU%2BPHNhbWw6U3ViamVjdCB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIj48c2FtbDpOYW1lSUQgRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoxLjE6bmFtZWlkLWZvcm1hdDp1bnNwZWNpZmllZCI%2BZGVtby5wYXJ0bmVyQHlvcG1haWwuY29tPC9zYW1sOk5hbWVJRD48c2FtbDpTdWJqZWN0Q29uZmlybWF0aW9uIE1ldGhvZD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmNtOmJlYXJlciI%2BPHNhbWw6U3ViamVjdENvbmZpcm1hdGlvbkRhdGEgTm90T25PckFmdGVyPSIyMDE2LTAzLTI4VDA4OjEzOjU5LjM5MFoiIFJlY2lwaWVudD0iaHR0cHM6Ly9jbW9rLmt3YW9vLm1lOjg0NDMvT3BlbkFNLTEyLjAuMC9Db25zdW1lci9tZXRhQWxpYXMvc3AiLz48L3NhbWw6U3ViamVjdENvbmZpcm1hdGlvbj48L3NhbWw6U3ViamVjdD48c2FtbDpDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxNi0wMy0yOFQwODowODoyOS4zOTBaIiBOb3RPbk9yQWZ0ZXI9IjIwMTYtMDMtMjhUMDg6MTM6NTkuMzkwWiIgeG1sbnM6c2FtbD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiI%2BPHNhbWw6QXVkaWVuY2VSZXN0cmljdGlvbj48c2FtbDpBdWRpZW5jZT5odHRwczovL2Ntb2sua3dhb28ubWU6ODQ0My9PcGVuQU0tMTIuMC4wPC9zYW1sOkF1ZGllbmNlPjwvc2FtbDpBdWRpZW5jZVJlc3RyaWN0aW9uPjwvc2FtbDpDb25kaXRpb25zPjxzYW1sOkF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxNi0wMy0yOFQwODowODo1OS4zODlaIiB4bWxuczpzYW1sPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXNzZXJ0aW9uIj48c2FtbDpBdXRobkNvbnRleHQ%2BPHNhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY%2BdXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6dW5zcGVjaWZpZWQ8L3NhbWw6QXV0aG5Db250ZXh0Q2xhc3NSZWY%2BPC9zYW1sOkF1dGhuQ29udGV4dD48L3NhbWw6QXV0aG5TdGF0ZW1lbnQ%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%2BPHNhbWw6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4c2k6dHlwZT0ieHM6YW55VHlwZSI%2BZGVtby5wYXJ0bmVyQHlvcG1haWwuY29tPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU%2BPHNhbWw6QXR0cmlidXRlIE5hbWU9ImVtYWlsIiBOYW1lRm9ybWF0PSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6YXR0cm5hbWUtZm9ybWF0OnVuc3BlY2lmaWVkIj48c2FtbDpBdHRyaWJ1dGVWYWx1ZSB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiIHhzaTp0eXBlPSJ4czphbnlUeXBlIj5kZW1vLnBhcnRuZXJAeW9wbWFpbC5jb208L3NhbWw6QXR0cmlidXRlVmFsdWU%2BPC9zYW1sOkF0dHJpYnV0ZT48c2FtbDpBdHRyaWJ1dGUgTmFtZT0iaXNfcG9ydGFsX3VzZXIiIE5hbWVGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphdHRybmFtZS1mb3JtYXQ6dW5zcGVjaWZpZWQiPjxzYW1sOkF0dHJpYnV0ZVZhbHVlIHhtbG5zOnhzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgeHNpOnR5cGU9InhzOmFueVR5cGUiPnRydWU8L3NhbWw6QXR0cmlidXRlVmFsdWU%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%2BPHNhbWw6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4c2k6dHlwZT0ieHM6YW55VHlwZSI%2BZGVtby5wYXJ0bmVyQHlvcG1haWwuY29tPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU%2BPHNhbWw6QXR0cmlidXRlIE5hbWU9Ik15Q3VzdG9tQXR0cmlidXRlc19Vc2VybmFtZSIgTmFtZUZvcm1hdD0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmF0dHJuYW1lLWZvcm1hdDp1bnNwZWNpZmllZCI%2BPHNhbWw6QXR0cmlidXRlVmFsdWUgeG1sbnM6eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4c2k6dHlwZT0ieHM6YW55VHlwZSI%2BZGVtby5wYXJ0bmVyQHlvcG1haWwuY29tPC9zYW1sOkF0dHJpYnV0ZVZhbHVlPjwvc2FtbDpBdHRyaWJ1dGU%2BPC9zYW1sOkF0dHJpYnV0ZVN0YXRlbWVudD48L3NhbWw6QXNzZXJ0aW9uPjwvc2FtbHA6UmVzcG9uc2U%2B
HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Set-Cookie: JSESSIONID=C14AE5CC016897A551FC87B075F24565; Path=/OpenAM-12.0.0/; Secure; HttpOnly
Set-Cookie: amlbcookie=01; Domain=.kwaoo.me; Path=/
Set-Cookie: iPlanetDirectoryPro=AQIC5wM2LY4SfczgN9cF7aQ_kAOO0WlwmSWVpWGEhEsJBT8.*AAJTSQACMDEAAlNLABM2MDg3Mzc3ODQ0MDQxMTQ1NTU2*; Domain=.kwaoo.me; Path=/
Location: https://cmok.kwaoo.me:8443/OpenAM-12.0.0/XUI/#profile/
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 0
Date: Mon, 28 Mar 2016 08:08:40 GMT
----------------------------------------------------------
https://cmok.kwaoo.me:8443/OpenAM-12.0.0/json/serverinfo/*

GET /OpenAM-12.0.0/json/serverinfo/* HTTP/1.1
Host: cmok.kwaoo.me:8443
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Accept-API-Version: protocol=1.0,resource=1.1
X-Requested-With: XMLHttpRequest
Referer: https://cmok.kwaoo.me:8443/OpenAM-12.0.0/XUI/
Cookie: JSESSIONID=C14AE5CC016897A551FC87B075F24565; amlbcookie=01; iPlanetDirectoryPro=AQIC5wM2LY4SfczgN9cF7aQ_kAOO0WlwmSWVpWGEhEsJBT8.*AAJTSQACMDEAAlNLABM2MDg3Mzc3ODQ0MDQxMTQ1NTU2*
Connection: keep-alive
If-None-Match: "1326193747"

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Date: Mon, 28 Mar 2016 08:08:40 GMT
----------------------------------------------------------
https://cmok.kwaoo.me:8443/OpenAM-12.0.0/json/users?_action=idFromSession

POST /OpenAM-12.0.0/json/users?_action=idFromSession HTTP/1.1
Host: cmok.kwaoo.me:8443
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Accept-API-Version: protocol=1.0,resource=2.0
X-Requested-With: XMLHttpRequest
Referer: https://cmok.kwaoo.me:8443/OpenAM-12.0.0/XUI/
Content-Length: 2
Cookie: JSESSIONID=C14AE5CC016897A551FC87B075F24565; amlbcookie=01; iPlanetDirectoryPro=AQIC5wM2LY4SfczgN9cF7aQ_kAOO0WlwmSWVpWGEhEsJBT8.*AAJTSQACMDEAAlNLABM2MDg3Mzc3ODQ0MDQxMTQ1NTU2*
Connection: keep-alive
{}
HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Content-API-Version: protocol=1.0,resource=2.0
Content-Type: application/json;charset=UTF-8
Content-Length: 176
Date: Mon, 28 Mar 2016 08:08:40 GMT
----------------------------------------------------------
https://cmok.kwaoo.me:8443/OpenAM-12.0.0/json/users/demo.partner@yopmail.com

GET /OpenAM-12.0.0/json/users/demo.partner@yopmail.com HTTP/1.1
Host: cmok.kwaoo.me:8443
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Accept-API-Version: protocol=1.0,resource=2.0
X-Requested-With: XMLHttpRequest
Referer: https://cmok.kwaoo.me:8443/OpenAM-12.0.0/XUI/
Cookie: JSESSIONID=C14AE5CC016897A551FC87B075F24565; amlbcookie=01; iPlanetDirectoryPro=AQIC5wM2LY4SfczgN9cF7aQ_kAOO0WlwmSWVpWGEhEsJBT8.*AAJTSQACMDEAAlNLABM2MDg3Mzc3ODQ0MDQxMTQ1NTU2*
Connection: keep-alive
If-None-Match: "0"

HTTP/1.1 304 Not Modified
Server: Apache-Coyote/1.1
Cache-Control: no-cache
Date: Mon, 28 Mar 2016 08:08:40 GMT

Thanks for reading.

About Chenda Mok

19 years of hands on experience in software design and development with emphasis on Enterprise Application Integration (EAI), Services Oriented Architecture (SOA) and Identity Management (IDM) solutions. I’m a software engineer, member of the professional service delivery team working for Salesforce. Prior to this, I worked for Oracle as Solution Architect, through SeeBeyond(06/2005), then SUN’s acquisition (04/2009). After my master’s degree in computer science in 1997; I always delivered consulting on architecture, design, implementation on integration’s field. I’m interested in architecture using EAI/SOA/IDM/BPM/Cloud technologies, software development and Java’s related technologies. I may blog about my work/activities at Salesforce, but I do not speak for my employer, past, present or future.
This entry was posted in Salesforce and tagged , , , , , . Bookmark the permalink.