Redirect from IdP to CAS with a param

Lalith Jayaweera ljayaweera at gmail.com
Wed Sep 20 21:48:21 EDT 2017


Hi Scott,

Thanks for the reply

Any similar example that you can refer me to in wiki?


 to try out in shibcas-authn-flow.xml

I added  below
 <evaluate
expression="externalContext.getNativeRequest().getSession().setAttribute('username',
requestParameters.username)" />


but param was null when I checked in the servlet, looks like param getting
lost way before ...

Curious what is the best flow to inject or any other suggestion.


<flow xmlns="http://www.springframework.org/schema/webflow"

      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

      xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow.xsd
<http://www.springframework.org/schema/webflow%20http:/www.springframework.org/schema/webflow/spring-webflow.xsd>
"

      parent="authn.abstract">



    <!-- This is a login flow for external authentication handled outside
the webflow engine. -->



    <action-state id="SetRPUIInformation">

        <evaluate expression="SetRPUIInformation" />

        <evaluate expression="'proceed'" />



        <transition on="proceed" to="ExternalTransfer" />

    </action-state>



    <view-state id="ExternalTransfer"
view="externalRedirect:#{flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.authn.Cas.externalAuthnPath')}?conversation=#{flowExecutionContext.getKey().toString()}">

        <on-render>

            <evaluate
expression="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.authn.context.AuthenticationContext)).getSubcontext(T(net.shibboleth.idp.authn.context.ExternalAuthenticationContext),
true).setFlowExecutionUrl(flowExecutionUrl + '&_eventId_proceed=1')" />

            <evaluate
expression="externalContext.getNativeRequest().getSession().setAttribute('conversation'
+ flowExecutionContext.getKey().toString(), new
net.shibboleth.idp.authn.impl.ExternalAuthenticationImpl(opensamlProfileRequestContext))"
/>


            <evaluate
expression="externalContext.getNativeRequest().getSession().setAttribute('username',
requestParameters.username)" />



        </on-render>

        <transition to="ValidateExternalAuthentication" />

    </view-state>



    <action-state id="ValidateExternalAuthentication">

        <evaluate expression="ValidateExternalAuthentication" />

        <evaluate expression="'proceed'" />



        <transition on="proceed" to="proceed" />

    </action-state>



    <bean-import resource="shibcas-authn-beans.xml" />



</flow>



On Wed, Sep 20, 2017 at 11:03 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 9/20/17, 4:22 AM, "users on behalf of Lalith Jayaweera" <
> users-bounces at shibboleth.net on behalf of ljayaweera at gmail.com> wrote:
>
> > How to get the  custom param comes in the inital query string to IdP
>
> You'd probably have to add an inbound interceptor flow of your own
> construction that accessed them and save them off somewhere for later use.
>
> -- Scott
>
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170921/ffb22229/attachment.html>


More information about the users mailing list