How can i pass additional attributes in a SAML authentication request from SP to IdP using Shibboleth?

[Cantor, Scott]

On 5/8/12 4:51 PM, "Kilian Ries" <mail at kilian-ries.de> wrote:
>
>Now, SP2 should send the needed information (typing sample from the
>biometric authentication, recorded by a flash-recorder on the IdP1's
>website) to IdP2 as an attribute within the SAML authnRequest. With that
>typing-sample attribute the IdP2 can authenticate the user and send the
>authentication-information back to the SP2.

I don't think that's really a good use of the AuthnRequest, and it isn't
something that the SP would support well. It isn't designed to take
sensitive input and get it into the message, and the APIs don't offer any
way to make that happen in the general case.

>Is this the code, where the SP builds the authnRequest?

No. If you're dead set on this, please direct questions to the dev list,
it's not a topic for the user support list.

-- Scott