IdP not maintaining POST params from one SP to another
Cantor, Scott
cantor.2 at osu.edu
Fri Oct 4 15:08:42 EDT 2013
On 10/4/13 2:54 PM, "Brian Reindel" <brian at reindel.com> wrote:
>We have cross linking across service providers, but as a part of that
>cross link we're not issuing a simple GET. It is a POST with several
>parameters in the POST body. The first time around if the user has not
>established a session on the SP you're linking to this will not work
>(params not maintained and GET issued after redirect). However, the
>second time around after the session has been established it works
>just fine. Are there configuration changes I can make to support this
>functionality consistently?
There's some limited functionality to preserve POST data on Apache.
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions
See postData, postTemplate, postExpire
In general this kind of thing is best handled with lazy sessions and more
intelligent application logic.
-- Scott
More information about the users
mailing list