Manni Heumann
and 2 contributors


Google::SAML::Request - Create or parse Google's SAML requests


You are currently reading the documentation for version 0.05


Google::SAML::Request will parse (and, for the sake of completeness, create) SAML requests as used by Google. Please note that Google::SAML::Request is by no means a full implementation of the SAML 2.0 standard. But if you want to talk to Google to authenticate users, you should be fine.

In fact, if you want to talk to Google about SSO, just use Google::SAML::Response and you should be fine.


Create a new request object by taking the request ouf of the CGI environment:

 use Google::SAML::Request;
 my $req = Google::SAML::Request->new_from_cgi();
 if ( $req->ProviderName() eq ''
    && $req->AssertionConsumerServiceURL() eq '' ) {

 else {
     print "go talk to someone else\n";

Or use a request string that you get from somewhere else (but make sure that it is no longer URI-escaped):

 use Google::SAML::Request;
 my $req = Google::SAML::Request->new_from_string( $request_string );
 if ( $req->ProviderName() eq ''
    && $req->AssertionConsumerServiceURL() eq '' ) {

 else {
     print "go talk to someone else\n";

Or, finally, create a request from scratch and send that to somebody else:

 use Google::SAML::Request;
 my $req = Google::SAML::Request->new(
                ProviderName => 'me.but.invalid',
                AssertionConsumerServiceURL => '',


You will need the following modules installed:



Create a new Google::SAML::Request object from scratch.

You have to provide the needed parameters here. Some parameters are optional and defaults are used if they are not supplied.

The parameters need to be passed in in a hash reference as key value pairs.

Required parameters

  • ProviderName

    Your name, e.g. ''

  • AssertionConsumerServiceURL

    The URL the user used to contact you. E.g. ''

Optional parameters

  • IssueInstant

    The time stamp for the Request. Default is now.

  • ID

    If you need to create the ID yourself, use this option. Otherwise the ID is generated from the current time and a pseudo-random number.


Create a new Google::SAML::Request object by fishing it out of the CGI environment.

If you provide a hash-ref with the key 'param_name' you can determine which cgi parameter to use. The default is 'SAMLRequest'.


Pass in a (uri_unescaped!) string that contains the request string. The string will be base64-unencoded, inflated and parsed. You'll get back a fresh Google::SAML::Response object if the string can be parsed.


Returns the XML representation of the request.


No, that's not a typo. This method will return the request in a form suitable to be used as a GET parameter. In other words, this method will take the XML representation, compress it, base64-encode the result and, finally, URI-escape that.

Accessor methods (read-only)

All of the following accessor methods return the value of the attribute with the same name








This module has a repository on github. Pull requests are welcome.


Manni Heumann (saml at lxxi dot org)


Copyright (c) 2008 Manni Heumann. All rights reserved.

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.