IdP-initiated sessions with a twist

[Cantor, Scott]

On 6/12/17, 10:05 PM, "users on behalf of Michael Dahlberg" <users-bounces at shibboleth.net on behalf of olgamirth at gmail.com> wrote:

>However this SP that I am working with wants the session response to be in the form of a POST in the following format:

You should tell them no, and there's not any real reason to trust that they've done anything correctly if they're asking for that.
 
>  Is it possible for the POST to be presented as the SP requests through a normal Shibboleth configuration or would this require
> custom code?

The only clean way to do it is with a custom message encoder and defining a new binding associated with it.

-- Scott