How can i pass additional attributes in a SAML authentication request from SP to IdP using Shibboleth?

Cantor, Scott cantor.2 at osu.edu
Wed May 9 15:50:48 BST 2012


On 5/9/12 4:55 AM, "Kilian Ries" <mail at kilian-ries.de> wrote:
>
>Is this the code, where the SP builds the authnRequest? If yes, i'll have
>to implement code there to insert a new "attribute" to the AuthnRequest,
>right? If not, where can I find the code which i'll have to modify?

The code that generates all SSO requests is found in the various
SessionInitiator handlers in shibsp/handler/impl/

The SAML 2 variant is obviously named.

SessionInitiators run either implicitly as part of accessing protected
content, or as explicit handlers by visiting a location like
/Shibboleth.sso/Login

The wiki documentation on them discusses this at a deployer level.

In both cases, the handler has access to the HTTP request shim that makes
information from the client available to the handler. You would have to
ensure that the information it needed to extract was included in the HTTP
request headers or body.

-- Scott



More information about the dev mailing list