Shibboleth and TMASystems

[Christopher Bongaarts]

On 6/3/2013 8:41 AM, Michael A Grady wrote:
> Yes, that form of ACS should be fine. I recently helped with an 
> institution with an integration with SuccessFactors, and their 
> (SuccessFactors) Assertion Consumer endpoint similarly contains a 
> query argument. This involved IdP-initiated flow, so there wasn't an 
> authentication request, but the Shib IdP was quite happy to package 
> and send the response to that endpoint.
>
> <md:AssertionConsumerService 
> xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" 
> Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
> Location="https://xxxxxx..successfactors.com/saml2/SAMLAssertionConsumer?company=NNNNNP 
> <https://performancemanager4.successfactors.com/saml2/SAMLAssertionConsumer?company=1135190P>" 
> index="1"/>
>

...so long as the query parameters are static.  If it changes on every 
request (check the list archives for a recent thread where someone ran 
into it) then you're sunk.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130603/212f333c/attachment-0001.html