How can i pass additional attributes in a SAML authentication request from SP to IdP using Shibboleth?
Cantor, Scott
cantor.2 at osu.edu
Wed May 9 15:50:48 BST 2012
On 5/9/12 4:55 AM, "Kilian Ries" <mail at kilian-ries.de> wrote:
>
>Is this the code, where the SP builds the authnRequest? If yes, i'll have
>to implement code there to insert a new "attribute" to the AuthnRequest,
>right? If not, where can I find the code which i'll have to modify?
The code that generates all SSO requests is found in the various
SessionInitiator handlers in shibsp/handler/impl/
The SAML 2 variant is obviously named.
SessionInitiators run either implicitly as part of accessing protected
content, or as explicit handlers by visiting a location like
/Shibboleth.sso/Login
The wiki documentation on them discusses this at a deployer level.
In both cases, the handler has access to the HTTP request shim that makes
information from the client available to the handler. You would have to
ensure that the information it needed to extract was included in the HTTP
request headers or body.
-- Scott
More information about the dev
mailing list