Passthrough of SAML response by SP to application

[Dennis Wagelaar]

Hello all,

Is it possible to have the Shibboleth SP pass through the entire SAML response instead of only selected attributes to the underlying web application?

I'm trying to build a sort of "broker" solution, where a web service uses shibboleth to authenticate a user, and then contacts another web service that authenticates both the "broker" web service as well as the original user (with the original SAML token). As far as I can see, I will need to pass on the entire signed SAML response for the user, if the other web service is to validate the initial user authentication.

Am I on the right track here?

Kind regards,
Dennis Wagelaar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120713/42df9855/attachment-0001.html