Apache Shib SP and target URL rewrite
Jan Vilhuber
JVilhuber at absolute.com
Tue Mar 7 04:57:14 EST 2017
I'm trying to figure out how to do something related to this page: https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPEnableApplication
I'm basically in the position described in "Provisioning the Application's Database or Session". What would make sense to me is to do a series of redirects that do session setup for the legacy system (after ConsumerService has processed the Assertion). In order to do that, I would need to have Shibboleth redirect not to the original target, but to an interstitial entry-point.
So if the original URL the user was trying to access was /MyApplication/SomeTable, then the targetUrl for shib would be /MyApplication/Interstitial?targetUrl=/MyApplication/SomeTable.
Is there a way of 'rewriting' the target URL either when capturing it (during session initiation) or when processing the Assertion? Since the session interception/initiation is done by apache/mod_shib, my application doesn't have a chance to inject this interstitial page, and I don't want to have session initiation being done by the app (that defeats the point of adding the Apache_mod_shib gateway).
Is there another way I can do this that I'm overlooking, either in the shib config or apache?
Regards,
Jan
More information about the users
mailing list