IdP v3.2 is stripping Query parameters

[Cantor, Scott]

> I am using spring security saml 2 and i have overriden HTTPPostEncoder
> on my SP side and i am appending a query parameter in IdP HTTP POST
> URL Endpoint.

Which is not valid in SAML.

> The URL is being requested in the browser but then the
> custom parameter is being removed and my query parameter is lost at
> IdP login page.

SWF does not preserve parameters like that, flows have to do work to accomplish that. In this specific case, what you're asking for is not really compliant with SAML so is not appropriate. In the more general case, flows have to have some code baked in up front to catch the parameters and store them in a number of possible places.

-- Scott