IdP not maintaining POST params from one SP to another

Cantor, Scott cantor.2 at osu.edu
Fri Oct 4 15:08:42 EDT 2013


On 10/4/13 2:54 PM, "Brian Reindel" <brian at reindel.com> wrote:

>We have cross linking across service providers, but as a part of that
>cross link we're not issuing a simple GET. It is a POST with several
>parameters in the POST body. The first time around if the user has not
>established a session on the SP you're linking to this will not work
>(params not maintained and GET issued after redirect). However, the
>second time around after the session has been established it works
>just fine. Are there configuration changes I can make to support this
>functionality consistently?

There's some limited functionality to preserve POST data on Apache.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions

See postData, postTemplate, postExpire

In general this kind of thing is best handled with lazy sessions and more
intelligent application logic.

-- Scott




More information about the users mailing list