autnrequest extensions

[Leif Johansson]

On 04/16/2015 03:47 PM, Cantor, Scott wrote:
> Sending to dev...
> 
> On 4/16/15, 8:23 AM, "Leif Johansson" <leifj at mnt.se> wrote:
> 
> 
>>
>> I may have a (not totally crazy) case for a dynamic authnrequest
>> extension. Dynamic in the sense that application logic in the SP
>> would have to insert the extension (or parts of it) into the
>> request.
>>
>> How hard would it be to do something like that in the SP?
> 
> There isn't any built-in support for it. Most of the time it ends up being 
> easier for some script to generate the request itself than bother trying 
> to get the SP to do it, but if signing is involved for some reason, that 
> changes the value proposition a little.
> 

Yeah it would have to come with signing...

> There's no specific RFE that I recall to track adding some kind of hook 
> for this.

Should I log one?

> 
>> One strategy I've been toying with is to have the application
>> generate the authnrequest and have the SP send it using something
>> like the backdoor hook but I don't think that is supported today, right?
> 
> No.
> 
> -- Scott
>