Redirect from IdP to CAS with a param
Lalith Jayaweera
ljayaweera at gmail.com
Wed Sep 20 21:48:21 EDT 2017
Hi Scott,
Thanks for the reply
Any similar example that you can refer me to in wiki?
to try out in shibcas-authn-flow.xml
I added below
<evaluate
expression="externalContext.getNativeRequest().getSession().setAttribute('username',
requestParameters.username)" />
but param was null when I checked in the servlet, looks like param getting
lost way before ...
Curious what is the best flow to inject or any other suggestion.
<flow xmlns="http://www.springframework.org/schema/webflow"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow.xsd
<http://www.springframework.org/schema/webflow%20http:/www.springframework.org/schema/webflow/spring-webflow.xsd>
"
parent="authn.abstract">
<!-- This is a login flow for external authentication handled outside
the webflow engine. -->
<action-state id="SetRPUIInformation">
<evaluate expression="SetRPUIInformation" />
<evaluate expression="'proceed'" />
<transition on="proceed" to="ExternalTransfer" />
</action-state>
<view-state id="ExternalTransfer"
view="externalRedirect:#{flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.authn.Cas.externalAuthnPath')}?conversation=#{flowExecutionContext.getKey().toString()}">
<on-render>
<evaluate
expression="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.authn.context.AuthenticationContext)).getSubcontext(T(net.shibboleth.idp.authn.context.ExternalAuthenticationContext),
true).setFlowExecutionUrl(flowExecutionUrl + '&_eventId_proceed=1')" />
<evaluate
expression="externalContext.getNativeRequest().getSession().setAttribute('conversation'
+ flowExecutionContext.getKey().toString(), new
net.shibboleth.idp.authn.impl.ExternalAuthenticationImpl(opensamlProfileRequestContext))"
/>
<evaluate
expression="externalContext.getNativeRequest().getSession().setAttribute('username',
requestParameters.username)" />
</on-render>
<transition to="ValidateExternalAuthentication" />
</view-state>
<action-state id="ValidateExternalAuthentication">
<evaluate expression="ValidateExternalAuthentication" />
<evaluate expression="'proceed'" />
<transition on="proceed" to="proceed" />
</action-state>
<bean-import resource="shibcas-authn-beans.xml" />
</flow>
On Wed, Sep 20, 2017 at 11:03 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 9/20/17, 4:22 AM, "users on behalf of Lalith Jayaweera" <
> users-bounces at shibboleth.net on behalf of ljayaweera at gmail.com> wrote:
>
> > How to get the custom param comes in the inital query string to IdP
>
> You'd probably have to add an inbound interceptor flow of your own
> construction that accessed them and save them off somewhere for later use.
>
> -- Scott
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170921/ffb22229/attachment.html>
More information about the users
mailing list