passing credentials as a query string

[Cantor, Scott]

On 5/3/12 4:06 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>Does the Idp software support initiating the SSO process by passing
>credentials via query string?  For example:

No. You can configure it for basic auth, in which case you pass them with
HTTP headers.

You appear to be trying to turn the browser profiles into something you
can invoke some other way, and you also should not do that. You don't
control how the IDP is invoked, that's governed by SAML bindings that you
cannot add to.

If you want to dictate the interface, you need a different binding,
possibly a different profile altogether that is meant for your use case.
You can also mess with it by defining a new IdP-initiated SSO binding that
takes different parameters, but the profile handler has no way to
interpret credentials as part of that message and do anything with them
because the login process remains browser centric and it will only look
for credentials once it runs a login handler.

-- Scott