Pass dynamic properties from SP to IdP?

[Cantor, Scott]

>The HttpServletHelper has access to the login context, and that
>Saml2LoginContext implementation does have a getter for the
>AuthnRequest. However, it sounds like without a custom AuthnRequest
>with a "parameters node" though it just isn't possible. Our SPs and
>IdP are on the same primary domain, so I may just end up setting a
>cookie to pass the additional data. If you do have a link describing
>how to create a custom AuthnRequest I would still be interested in
>reading up on it.

The SP doesn't have any support for customizing an AuthnRequest with any
dynamic content. You're basically going to have to create your own code to
generate the SAML request on behalf of the SP. It won't care, it doesn't
maintain any state that causes it to notice that it didn't generate the
request originally.

So it's basically a SAML issue, you'll have to read the specification for
the binding you want to use and develop an extension for the content you
want to include.

-- Scott