Apache Shib SP and target URL rewrite

Jan Vilhuber JVilhuber at absolute.com
Tue Mar 7 04:57:14 EST 2017


I'm trying to figure out how to do something related to this page: https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPEnableApplication

I'm basically in the position described in "Provisioning the Application's Database or Session". What would make sense to me is to do a series of redirects that do session setup for the legacy system (after ConsumerService has processed the Assertion). In order to do that, I would need to have Shibboleth redirect not to the original target, but to an interstitial entry-point.

So if the original URL the user was trying to access was /MyApplication/SomeTable, then the targetUrl for shib would be /MyApplication/Interstitial?targetUrl=/MyApplication/SomeTable.

Is there a way of 'rewriting' the target URL either when capturing it (during session initiation) or when processing the Assertion? Since the session interception/initiation is done by apache/mod_shib, my application doesn't have a chance to inject this interstitial page, and I don't want to have session initiation being done by the app (that defeats the point of adding the Apache_mod_shib gateway).

Is there another way I can do this that I'm overlooking, either in the shib config or apache?

Regards,
Jan
 


More information about the users mailing list