Checking AuthnRequest for the presence of attributes

[Cantor, Scott]

> According to my federation rules, when receiving an AuthnRequest I need to
> check the saml message for the presence of specific elements and attributes
> (and eventually their values).

What elements and attributes are you talking about? The IdP processes the message for you, there's no reason you should have to do anything unless you're talking about extensions.

> Any way to do this? I thought I could modify the external authn flow by
> adding a state that invokes my custom code, but would I be able to get the
> saml message?

The inbound message is tracked throughout the entire flow, but where you plug something in depends entirely on what you're trying to accomplish.

I don't think you need to do what you think you need to do, but without more details, I'm just guessing.

-- Scott