Checking AuthnRequest for the presence of attributes

[SAMUELE RILLI]

It's true that IdP already processes the message, but I need to further
check for optional saml elements/attributes.
For example, our regulation says that the element Issuer must include the
attributes Format and NameQualifier; or, for some custom
AuthnContextClassRef, I need to check that ForceAuthn is set to 1.
Hope this makes sense
Thanks

2016-11-04 18:54 GMT+01:00 Cantor, Scott <cantor.2 at osu.edu>:

> > According to my federation rules, when receiving an AuthnRequest I need
> to
> > check the saml message for the presence of specific elements and
> attributes
> > (and eventually their values).
>
> What elements and attributes are you talking about? The IdP processes the
> message for you, there's no reason you should have to do anything unless
> you're talking about extensions.
>
> > Any way to do this? I thought I could modify the external authn flow by
> > adding a state that invokes my custom code, but would I be able to get
> the
> > saml message?
>
> The inbound message is tracked throughout the entire flow, but where you
> plug something in depends entirely on what you're trying to accomplish.
>
> I don't think you need to do what you think you need to do, but without
> more details, I'm just guessing.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161104/2eacbd32/attachment.html>