NB SAML Gateway

A minimal gateway that receives a SAMLResponse and routes to either MBW or Marketplace.

What this does

Accepts a base64-encoded SAMLResponse (IdP-initiated).
Reads optional query parameters: app (mbw or marketplace) and env (dev, uat, prod).
If app is not passed in query params, the gateway runs in auto-mode: redirects to MBW if the member exists; otherwise to Marketplace.
For MBW: auto-POSTs the same SAMLResponse to MBW ACS.
For Marketplace: parses attributes and redirects to https://dev.nbm.store/ with query params.

Inputs

SAMLResponse (required) – base64-encoded SAML 2.0 response posted to /gateway/acs.
app (optional) – mbw or marketplace. If missing/empty ⇒ auto (MBW if member exists, else Marketplace).

Outcomes

MBW: Browser auto-submits to MBW ACS; member signs in to MBW.
Marketplace: Browser redirects to https://dev.nbm.store/ with memberId, email, city, state, fname, lname.

Key Endpoints

GET /gateway – health/info page.
POST /gateway/acs?app=mbw|marketplace – explicit routing; or POST /gateway/acs – auto-mode (MBW if member exists, else Marketplace).

Test the ACS Endpoint

This tester posts to /docs/test-acs, which forwards the request to /gateway/acs using the required application/x-www-form-urlencoded format.

SAMLResponse (Base64-encoded)

Sent in the form body as SAMLResponse.

App (optional)

Dont select for default confguration (MBW if member exists, else Marketplace)

Env (optional)

Used for env selection (Default to uat)

The tester posts SAMLResponse as application/x-www-form-urlencoded; app and env are appended to the ACS request as query parameters by the Docs controller.