autnrequest extensions

[Cantor, Scott]

Sending to dev...

On 4/16/15, 8:23 AM, "Leif Johansson" <leifj at mnt.se> wrote:


>
>I may have a (not totally crazy) case for a dynamic authnrequest
>extension. Dynamic in the sense that application logic in the SP
>would have to insert the extension (or parts of it) into the
>request.
>
>How hard would it be to do something like that in the SP?

There isn't any built-in support for it. Most of the time it ends up being 
easier for some script to generate the request itself than bother trying 
to get the SP to do it, but if signing is involved for some reason, that 
changes the value proposition a little.

There's no specific RFE that I recall to track adding some kind of hook 
for this.

>One strategy I've been toying with is to have the application
>generate the authnrequest and have the SP send it using something
>like the backdoor hook but I don't think that is supported today, right?

No.

-- Scott