Questions About SAML2.ArtifactResolution Configuration

Drew Zebrowski Andrew.Zebrowski at
Tue May 2 10:12:51 EDT 2017

Thanks for the information, Scott. Is there any direction you can point me to that has an example of configuring SAML2.ArtifactResolution for IDP 3+?

Drew Zebrowski

-----Original Message-----
From: users [mailto:users-bounces at] On Behalf Of Cantor, Scott
Sent: Wednesday, April 26, 2017 12:44 PM
To: Shib Users <users at>
Subject: Re: Questions About SAML2.ArtifactResolution Configuration

On 4/26/17, 11:45 AM, "users on behalf of Drew Zebrowski" <users-bounces at on behalf of Andrew.Zebrowski at> wrote:

> How can I get the IDP to include that detail in the URL?

You're confusing the entityID, which is a name, with the AssertionConsumerService, which is a location. If they need a parameter in the ACS location, then their metadata needs to specify that and their AuthnRequest would need to specify it as the response location. None of this is different in V2 vs. V3.

-- Scott

To unsubscribe from this list send an email to users-unsubscribe at
The information contained in this transmission contains privileged and confidential information. It is intended only for the use of the person named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.

CAUTION: Intended recipients should NOT use email communication for emergent or urgent health care matters.

More information about the users mailing list