Capturing SAML Attributes from the IDP

[Jim Hoy]

I suppose this is a lifecycle  issue, and please excuse the question if it's stupid one, but... As I see it, the process goes like this:


1.       User requests a Shib-protected resource.


2.       The Shibboleth ISAPI filter (as this is Windows/IIS) intercepts the request and directs the user to the IDP (only one IDP here)


3.       The user logs in successfully


4.       The browser is redirected (HTTP 302) back to /Shibboleth.sso/SAML2/POST


5.       The ISAPI filter does another 302 redirection to my secured content (/secure), which is now available to the authenticated user.

At step #4, I look at the HTTP request and see that there are form variables posted to the HTTP-POST handler (Shibboleth.sso/SAML2/POST). The form variables includes one called SAMLResponse which is the base 64-encoded SAML XML. This information is apparently discarded when the 302 redirect happens from the HTTP-POST handler to the /secure URL.

My question is a simple one: How do I access the SAMLResponse in this process? I need to extract the list of attributes for use elsewhere in my application, and I'm green-horned enough to not understand what I do at this point to actually get to the attributes I've just received.

Thanks for your help (and for not laughing too hard)


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130531/c0b73da5/attachment.html