How to insert detailed message in saml response

[ayeletgini]

Hi,

I have tried to insert more detailed messages in saml response (ECP flow)
for a better error handling.
Those errors will not be exposed, only inner, so i think there is no
security issue with that.

what i did so far:

changed in the idp.properties the property :
idp.errors.detailed = true

changed the error messages under :
/opt/shibboleth-idp/messages/error-messages.properties 
in order to distinguish between the different Authn errors.

but all i am getting is "no potential flows" as a message in the saml
response:

 <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Requester">
          <saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:AuthnFailed"/>
        </saml2p:StatusCode>
 <saml2p:StatusMessage>*no potentials flow*</saml2p:StatusMessage>

i saw that indeed the NoPotentialFlows event is thrown, but Ldap user
validation is throwing the InvalidCredentials event (for example), so how
can i get the message of that event in the saml response and not the "No
potential flows"

as i said would like to distinguish between the different events which are
all under AuthnFailed status code. (Account error, password expired, invalid
etc)

After digging in the flows xmls i saw that there is a  transition to
HandleErrorWithResponse which will eventually write the event details to the
saml response. but don't know how to operate that for the events.

Appreciate your help :-)
Thank you



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/How-to-insert-detailed-message-in-saml-response-tp7626525.html
Sent from the Shibboleth - Developers mailing list archive at Nabble.com.