This inspired me to write and update the Giancarlo’s code. See my post on it at https://lucee.daemonite.io/t/cfml-sso-demo-app-for-consumption-of-saml-response/7558 . Unfortunately, for OneLogin users, I removed OneLogin as a provider. However, I tried to make the updated code modular enough to support different identity providers and I hope someone can help adding OneLogin back into the mix!