Shibboleth IdP v3 beta 1 External Authentication State

Gary Gwin ggwin at cafesoft.com
Wed Dec 17 19:46:23 EST 2014


I'm developing an External Authentication module for third-party SSO. 
When I need to redirect to the external third-party SSO login page, if I 
preserve state by adding a "conversation" query parameter to the 
redirect (to redirect back when login is finished), the module works as 
desired. Here's pseudo code:

if (authnRequired){
    final String conv = request.getParameter("conversation");
 
response.sendRedirect("https://idp.domain.com/login.jsp&url=https://idp.domain.com/idp/Authn/External?conversation=" 
+ conv);
    return;
}

Is this correct use of the API or is there a better way to handle state?

Thanks,

Gary

-- 

Gary Gwin
Cafesoft
http://www.cafesoft.com

*****************************************************************
*                                                               *
*  Cams is a web single sign-on software solution for Apache,   *
*  IIS, WebLogic, WebSphere, JBoss and Tomcat web servers.      *
*                                                               *
*****************************************************************


More information about the users mailing list