Redirect from IdP to CAS with a param

[Lalith Jayaweera]

I think the software is kept below

https://github.com/Unicon/shib-cas-authn3

However just to simulate I tried something like below  URL by injecting
additional param 'username' with the objective that later CAS flow will be
based on that value

but in ShibcasAuthServlet.java
<https://github.com/Unicon/shib-cas-authn3/blob/v3.0.0/idp-cas-invoker/src/main/java/net/unicon/idp/externalauth/ShibcasAuthServlet.java>
I
did loop thru the request params and not able to see the param username,

If I can get hold of that, I can create the CAS redirect URL accordingly,

How to get the  custom param comes in the inital query string to IdP


https://idpuat/idp/profile/SAML2/Unsolicited/SSO?providerId=https://mysample
sp/app/home&username=3333






On Tue, Sep 19, 2017 at 6:47 AM, Lalith Jayaweera <ljayaweera at gmail.com>
wrote:

> Yes within CAS it is all about login-flow.xml but the issue is, when IdP
> redirect to CAS, it will remove pass only the entityID and we cannot have a
> varying entityIDs as here the variable is the username.
>
> Basically, when the initial request comes to IdP from SP, if any
> queryparam contains with the username,can we pass that to CAS as another
> param in addition to the entityId,
>
> I think at the moment it cuts off all those param and only redirect with
> enitityId
>
> On Mon, Sep 18, 2017 at 9:13 PM, Marvin Addison <marvin.addison at gmail.com>
> wrote:
>
>> On Mon, Sep 18, 2017 at 4:31 AM Lalith Jayaweera <ljayaweera at gmail.com>
>> wrote:
>>
>>> https://ourCASHOST/cas/login?service=https%3A%2F%2Fouridphos
>>> t%2Fidp%2FAuthn%2FExtCas%3Fconversation%3De1s1&entityId=urn%3Auat%3xxx%
>>> 3Amsssne
>>> <https://loginuat.vu.edu.au/cas/login?service=https%3A%2F%2Fidpuatweb1.vu.edu.au%2Fidp%2FAuthn%2FExtCas%3Fconversation%3De1s1&entityId=urn%3Auat%253xxx%3Amsssne>
>>>
>>>
>>>
>>> Is it possible to inject another param to above within IdP e.g. username
>>> which gets from the SP link?
>>>
>>
>> That should be possible by customizing the CAS login flow,
>> login-flow.xml, as you seem to realize. It's not clear to me how you could
>> possibly have a mapping from SP entityID to username, but I suppose you
>> know how to solve that problem.
>>
>> M
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170920/d7dc0fc6/attachment.html>