Hyperlinks to Shibboleth protected URLs in MS Office documents

[Cantor, Scott]

On 11/29/17, 3:13 AM, "Philip Brusten" <philip.brusten at kuleuven.be> wrote:

> 2. A GET request to the form action URL?!

Timing aside, the URL itself is the same throughout the flow, and the method changes from POST to GET or back depending on what the webflow is doing, so that isn't unusual.

> Don't you observe the same behaviour?

Haven't tried it.

They have proven they can't be counted on to support this, so I think you really have to *not* protect those resources directly, and rely on some kind of indirection before the SP gets involved.

-- Scott