Saml response is not sent to AssertionConsumerServiceURL

I am sending AssertionConsumerServiceURL in my Saml Request (see below), however when the Saml response is sent by auth0, it is sent to the “Application Callback URL” specified in the SAML 2 Web App Settings page. The description for “recipient” on that page says this -
recipient (string): The recipient of the SAML Assertion (SubjectConfirmationData). Default is AssertionConsumerUrl on SAMLRequest or Callback URL if no SAMLRequest was sent.

How can I get Auth0 to send the Saml response to the AssertionConsumerServiceURL instead of “Application Callback URL” ?

<samlp:AuthnRequest xmlns:samlp=“urn:oasis:names:tc:SAML:2.0:protocol”
ID=“id-3Yo60a8IEWW7qJgKhoChatV84vE-”
Version=“2.0”
IssueInstant=“2019-11-05T16:59:44Z”
Destination=“Sign In with Auth0
AssertionConsumerServiceURL=“localhost:23884/TestPage.aspx?RelayState=abc”
AssertionConsumerURL=“localhost:23884/TestPage.aspx?RelayState=abc”
ProtocolBinding=“urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST”
>
<saml:Issuer xmlns:saml=“urn:oasis:names:tc:SAML:2.0:assertion”
Format=“urn:oasis:names:tc:SAML:2.0:nameid-format:entity”
>SPTest-178000</saml:Issuer>
<samlp:NameIDPolicy Format=“urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified”
AllowCreate=“true”
/>
</samlp:AuthnRequest>

I’m having same issue. AssertionConsumerServiceURL does not work - redirects me to callback from auth0 management. Is there any way to redirect to address that I provided in AuthnRequestURL ?

1 Like