Marketplace – SAML Path

For app=marketplace, the gateway parses attributes and redirects to https://dev.nbm.store/ with query params (dev only).

---

Inputs

• SAMLResponse (required): base64-encoded, signed SAML 2.0 response containing: memberId, email, city, state, fname, lname.
• app (required): must be marketplace → /gateway/acs?app=marketplace.

What it does

1. Receives SAMLResponse at /gateway/acs?app=marketplace.
2. Decodes the assertion and extracts attributes.
3. 302-redirects to https://dev.nbm.store/ with: ?memberId=...&email=...&city=...&state=...&fname=...&lname=....

Outcome

• Browser lands on Marketplace with the member context in the URL (for dev convenience).

Notes

• Prod hardening: do not pass PII in querystrings; issue a short-lived signed token or use a secure cookie.
• Consider signature/issuer validation before trusting attributes.