<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div style="font-size: medium; ">Hi Shibboleth dev-list,</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">I'm trying to pass additional attributes with dynamic content into it from SP to IdP inside the SAML AuthnRequest.</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">Let me explain my situation in detail:</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">I'm working on a research-prototype. The base-struckture is running well, here is an overview:</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">SP1 (protected web resource) <--> IdP1 (user/password) with "internal" SP2 <--> IdP2 (biometric authentication)</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">The IdP1 communicates intern with the SP2 (running on the same machine): SP2 receives the attributes form IdP2 and the IdP1 fetches them from the SP2 (working!).</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">Now, SP2 should send the needed information (typing sample (STRING) from the biometric authentication, recorded by a flash-recorder on the IdP1's website) to IdP2 as an attribute within the SAML AuthnRequest. With that</div>
<div style="font-size: medium; ">typing-sample attribute the IdP2 can authenticate the user and send the authentication-information back to the SP2.</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">To realize that scenario, i think i must modify the SP and insert custom code.</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">The last days i checked the Shibboleth SP sourcecode. In the "ServiceProvider.cpp" file i found the following code:</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>void SHIBSP_DLLLOCAL clearHeaders(SPRequest& request) {</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>const Application& app = request.getApplication();</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>app.clearHeader(request, "Shib-Session-ID", "HTTP_SHIB_SESSION_ID");</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>app.clearHeader(request, "Shib-Identity-Provider", "HTTP_SHIB_IDENTITY_PROVIDER");</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>app.clearHeader(request, "Shib-Authentication-Method", "HTTP_SHIB_AUTHENTICATION_METHOD");</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>app.clearHeader(request, "Shib-Authentication-Instant", "HTTP_SHIB_AUTHENTICATION_INSTANT");</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>app.clearHeader(request, "Shib-AuthnContext-Class", "HTTP_SHIB_AUTHNCONTEXT_CLASS");</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>app.clearHeader(request, "Shib-AuthnContext-Decl", "HTTP_SHIB_AUTHNCONTEXT_DECL");</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>app.clearHeader(request, "Shib-Assertion-Count", "HTTP_SHIB_ASSERTION_COUNT");</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>app.clearAttributeHeaders(request);</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>request.clearHeader("REMOTE_USER", "HTTP_REMOTE_USER");</div>
<div style="font-size: medium; "><span class="Apple-tab-span" style="white-space: pre; "></span>}</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">Is this the code, where the SP builds the authnRequest? If yes, i'll have to implement code there to insert a new "attribute" to the AuthnRequest, right? If not, where can I find the code which i'll have to modify?</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">Is there anything else which i'll have to pay attention to?</div>
</div>
<div style="font-size: medium; "><br>
</div>
<div style="font-size: medium; ">Thanks</div>
<div style="font-size: medium; ">Greets</div>
<div style="font-size: medium; ">Kilian Ries</div>
<div style="font-family: Calibri, sans-serif; "><br>
</div>
</body>
</html>