Query string passing

[Cantor, Scott]

On 11/17/11 4:46 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>I am running Shibboleth 2.3.1 x64 SP on Win 2008 with IIS7.  When I have
>an Idp authenticate to me, they will hit a URL similar to this:
>
>https://shib.lynda.com/Shibboleth.sso/InCommon?providerId=[Insert
>EntityID here]&target=https://shib.lynda.com/InCommon

Preferably entityID, not providerId.

>If I add a data element as part of the query string - Say something like
>this:
>
>https://shib.lynda.com/Shibboleth.sso/InCommon?providerId=[Insert
>EntityID here]&target=https://shib.lynda.com/InCommon&CID=54635643
>
>Would that additional query string parameter get passed to my protected
>resource?

Whatever you set target to will be recovered. But you have to URL encode
it, so your specific example won't work unless you fix that.

-- Scott