override ProtocolBinding in authnRequest

[Cantor, Scott]

On 7/21/17, 1:30 PM, "users on behalf of John Schrader" <users-bounces at shibboleth.net on behalf of John.Schrader at nd.edu> wrote:

> Is there a way to override the ProtocolBinding being supplied in an AuthnRequest?
> We have a vendor that is sending "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
> but expecting: "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

If you want to avoid a bug in the requests issued by the SP, which I would simply report and wait for them to fix, generally a simple way is to take advantage of the meaninglessness of most SP requests, and funnel them through a facade script on the server that just redirects through the IdP's Unsolicited SSO endpoint, essentially bypassing the request. You can still maintain the RelayState in doing that.

If you really want to override it, it requires Java code and the authoring of a Spring WebFlow. I would not suggest that level of effort.

-- Scott