proper encoding of ACS URL in metadata and AuthnRequest

[Paul Hethmon]

Have you tried using:

&

to encode the ampersand? I have not run that through Velocity, but have used it successfully with Shib to get some weird query parameters to an ADFS system.

Paul


Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


On Jan 28, 2014, at 2:10 AM, Sean McHugh <sean8sean at gmail.com<mailto:sean8sean at gmail.com>> wrote:

The desired ACS url is, without encoding is:

https://secure.terranovasite.com/LMS/login/saml2/tnsso_ACS.aspx?e=561e8185-621e-49c1-9856-7013f9d8491&lang=en&t=1

In the AuthnRequest and metadata, we are using:

https://secure.terranovasite.com/LMS/login/saml2/tnsso_ACS.aspx?e=561e8185-621e-49c1-9856-7013f9d8491c%26lang=en%26t=1

However, it appears that when this URL is processed by Velocity, the '%' is re-encoded again and it ultimately yields the following URL:

https://secure.terranovasite.com/LMS/login/saml2/tnsso_ACS.aspx?e=561e8185-621e-49c1-9856-7013f9d8491&lang


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140128/f6068e86/attachment.html