How to pass the SAML Authentication request to External Login handler

[Cantor, Scott]

> How do I pass the complete SAML Authentication request as it is to my
> testing.jsp. I am expecting some application specific data in the SAML authn
> request based on which my testing.jsp will do some validations. Please
> suggest me on the configs.

Your servlet has access to the information using the LoginContext interface in the API, assuming such a request actually exists. How you get it past that point and what you do with it is up to you, but simply passing data as a parameter on a URL for example won't be secure.

If you're using that handler, you're inventing your own security protocol between the servlet you install in the IdP and whatever else it interacts with. That's a dangerous thing to do and you should be very careful.

-- Scott