adding custom elements to shib IdP SAML response?

[Cantor, Scott]

On 12/5/14, 8:24 PM, "Liam Hoekenga" <liamr at umich.edu> wrote:

>One of our vendors will allow us to specify an error page to redirect to 
>in the case of attempted access by unauthorized users, but to do so, we'd 
>need to extend the XML namespace in the response and add a bit that looks 
>like..
>
>
><saml:Advice 
>xmlns:vendorsaml="https://vendor.com/SAMLRedirector/ClientSAMLLogin.aspx">
><vendorsaml:OnError>http://news.google.com</vendorsaml:OnError>
></saml:Advice>

Wouldn't be Concur, would it?

>I've never seen a vendor request to do anything like this before.  Will 
>this shib IdP support it?  Quick browsing of the wiki suggests no.

Not without writing code, and the code involved in V2 is monolithic. V3 is 
designed to slot in small bits of additional code.

-- Scott