If you have a single web server that uses html pages, like most bloggers do, the easiest way to take advantage of infocard identities is to get the Identity Selector to post tokens directly to your web server. Normally, you might get the contents of a form in the post. When using InfoCards you get a “token”. Various types of token are possible, but SAML tokens are most common. The built-in self-asserted identity provider uses the SAML format.<\/p>\n
\r\n<enc:EncryptedData Type="http:\/\/www.w3.org\/2001\/04\/xmlenc#Element"\r\n xmlns:enc="http:\/\/www.w3.org\/2001\/04\/xmlenc#">\r\n <enc:EncryptionMethod Algorithm="http:\/\/www.w3.org\/2001\/04\/xmlenc#aes256-cbc" \/> \r\n <KeyInfo xmlns="http:\/\/www.w3.org\/2000\/09\/xmldsig#">\r\n <e:EncryptedKey xmlns:e="http:\/\/www.w3.org\/2001\/04\/xmlenc#">\r\n <e:EncryptionMethod Algorithm="http:\/\/www.w3.org\/2001\/04\/xmlenc#rsa-oaep-mgf1p">\r\n <DigestMethod Algorithm="http:\/\/www.w3.org\/2000\/09\/xmldsig#sha1" \/> \r\n <\/e:EncryptionMethod>\r\n <KeyInfo>\r\n <o:SecurityTokenReference xmlns:o="http:\/\/docs.oasis-open.org\/wss\/2004\/01\/\r\n oasis-200401-wss-wssecurity-secext-1.0.xsd">\r\n <o:KeyIdentifier ValueType="http:\/\/docs.oasis-open.org\/wss\/\r\n oasis-wss-soap-message-security-1.1#ThumbprintSHA1" \r\n EncodingType="http:\/\/docs.oasis-open.org\/wss\/2004\/01\/\r\n oasis-200401-wss-soap-message-security-1.0#Base64Binary">\r\n +PYbznDaB\/dlhjIfqCQ458E72wA=\r\n <\/o:KeyIdentifier> \r\n <\/o:SecurityTokenReference>\r\n <\/KeyInfo>\r\n <e:CipherData>\r\n <e:CipherValue>\r\n 1dYJm11Qw2UDKuS7OsjY23k+vX4l5nHkKUC71ev7<\/span>\r\n jtDUC0dFn1mcWunmGV272bpXGHeyWIviv2Salkxj<\/span>\r\n XErXBwO3hq9\/dNyDfY7VvLRi5rOvn1Szgb71d0Xg<\/span>\r\n rKCvnUljhy9bSssSxtYgr4YOTkUV894z0yXS9omK<\/span>\r\n S0XNtm\/dzr4=<\/span>\r\n <\/e:CipherValue> \r\n <\/e:CipherData>\r\n <\/e:EncryptedKey>\r\n <\/KeyInfo>\r\n <enc:CipherData>\r\n <enc:CipherValue>\r\n 77Ybo3C32JckPMD+lxm9t7KKxfQjMT8ojczrDs0i<\/span>\r\n HsxJ3Q6i3B04RAGrOivLfqMYzYP4lZXsM2lF8cUs<\/span>\r\n aVOTY9KqsJjpOBwyk37n9tw7pV6E3SXkHtXx92xl<\/span>\r\n 5AqmjPeBdDI\/syrIjgE1bpbn5sX5PpNoOmAbYSV2<\/span>\r\n dQRBnImKJBAfKQFFmMk0mcUb\/Bv11w9aCAgimPy7<\/span>\r\n UfwqQPhkPp0DbCoINFZsmbgppelTHTh6Bnpe\/it9<\/span>\r\n OPDqBeUaILVBA7vMVvgDA0vmklb9g3mEzo1va5GG<\/span>\r\n 4GP\/u0xuCG7x9glozdDVtsBsohJiGj0UnFS2QI0o<\/span>\r\n ZbfbMS9rtWCiHRbp0TIhcykn70PUooVJrU\/HcKDh<\/span>\r\n baKnoC3dd0Y73gqTogwvruYZ3Fg9mqhlYMSoLmsR<\/span>\r\n sz+W8a935WQM1OAcNz6VEjxaKn7QDRZn\/OfQhW1r<\/span>\r\n XsWh+oazVKHdxpa9vvj6UeV3w8DaJsmZDO5SRTep<\/span>\r\n LjZzfMENc52XG8CJfDrVHEuPmals92NoTN+BwIc6<\/span>\r\n R4WpHPxr+P7GPfpb24apOfgBmfN\/snq+Jy37PLjV<\/span>\r\n 4yivz9NmP6EKEpDI7u7b+evytYRmQrh04T\/aL6gi<\/span>\r\n NHzgfHo7PxiNU6hvCKNQ0vtKgMp1R6QjkMV93FvS<\/span>\r\n 1I6eknbHLjbUJaJuuGI3eH83RN\/Gx7bsuDvfTvDL<\/span>\r\n WiTTsG2zD5UPWeEjx+ROCkhLpb8Ojm8h6fI3s+Qv<\/span>\r\n qUuzAbzH8cHiyfWGAt8HPe1BwKWcU25XbVfQTOnG<\/span>\r\n jP2+NXt2AUtDYimUjydSlyMzk0Bi3GPr19aav2UV<\/span>\r\n N1gr2ldVotma4lpNonhLjk+liHTrrO7P51\/vkc4k<\/span>\r\n P7koLTLBmmNooOQrJ1w70MelRjZnFbCdoadyzH8j<\/span>\r\n z\/vR\/zzvO62z4ycFyn\/S9OxqFqrufKpyijnopVS3<\/span>\r\n bf4JGazumScIutKfUUpWOtRELXnCpv4S9JB4FIkr<\/span>\r\n Kqqgi\/3rh06QMByWK6DU7cf94dI3jIzx336A1a\/r<\/span>\r\n . <\/span>\r\n . <\/span>\r\n . <\/span>\r\n Wvl2o5ABIqvToMV1bp16Ns1ImSgxuB074kmAvAUx<\/span>\r\n b\/LXPXq1Gwcz2YtyaHMYSUvzzzYRuDH9qu0R6748<\/span>\r\n B\/C1if4MeXHUqMPYaEQ+dhuzoVUMuy7\/kQVP5ckb<\/span>\r\n B0asMSqIiJp5B4vecBe\/aGQo9AYNEwPv4xAB5cvr<\/span>\r\n PBEG4TCFtSVyJkn2LcdwNzqmNqIewGMxawwUPgxe<\/span>\r\n D2w==<\/span>\r\n <\/enc:CipherValue> \r\n <\/enc:CipherData>\r\n<\/enc:EncryptedData>\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"If you have a single web server that uses html pages, like most bloggers do, the easiest way to take advantage of infocard identities is to get the Identity Selector to post tokens directly to your web server. Normally, you might get the contents of a form in the post. When using InfoCards you get … Continue reading THE ENCRYPTED TOKEN<\/span><\/a><\/p>\n","protected":false},"author":68,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[],"_links":{"self":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/403"}],"collection":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=403"}],"version-history":[{"count":0,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/403\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=403"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=403"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.identityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=403"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}