Redirect from IdP to CAS with a param

Lalith Jayaweera ljayaweera at gmail.com
Thu Sep 21 03:00:43 EDT 2017


Even though not the exact same need, I am following something like below to
introduce an interceptor

any other example in wiki let us know

http://shibboleth.1660669.n2.nabble.com/Zoom-Integration-with-Shibboleth-IdP-v3-and-non-signed-logout-request-td7613958.html#a7613966


On Thu, Sep 21, 2017 at 11:48 AM, Lalith Jayaweera <ljayaweera at gmail.com>
wrote:

> Hi Scott,
>
> Thanks for the reply
>
> Any similar example that you can refer me to in wiki?
>
>
>  to try out in shibcas-authn-flow.xml
>
> I added  below
>  <evaluate expression="externalContext.getNativeRequest().getSession().setAttribute('username',
> requestParameters.username)" />
>
>
> but param was null when I checked in the servlet, looks like param getting
> lost way before ...
>
> Curious what is the best flow to inject or any other suggestion.
>
>
> <flow xmlns="http://www.springframework.org/schema/webflow"
>
>       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>
>       xsi:schemaLocation="http://www.springframework.org/schema/webflow
> http://www.springframework.org/schema/webflow/spring-webflow.xsd
> <http://www.springframework.org/schema/webflow%20http:/www.springframework.org/schema/webflow/spring-webflow.xsd>
> "
>
>       parent="authn.abstract">
>
>
>
>     <!-- This is a login flow for external authentication handled outside
> the webflow engine. -->
>
>
>
>     <action-state id="SetRPUIInformation">
>
>         <evaluate expression="SetRPUIInformation" />
>
>         <evaluate expression="'proceed'" />
>
>
>
>         <transition on="proceed" to="ExternalTransfer" />
>
>     </action-state>
>
>
>
>     <view-state id="ExternalTransfer" view="externalRedirect:#{
> flowRequestContext.getActiveFlow().getApplicationContext().
> getBean('shibboleth.authn.Cas.externalAuthnPath')}?conversation=#{
> flowExecutionContext.getKey().toString()}">
>
>         <on-render>
>
>             <evaluate expression="opensamlProfileRequestContext.
> getSubcontext(T(net.shibboleth.idp.authn.context.AuthenticationContext)).
> getSubcontext(T(net.shibboleth.idp.authn.context.
> ExternalAuthenticationContext), true).setFlowExecutionUrl(flowExecutionUrl
> + '&_eventId_proceed=1')" />
>
>             <evaluate expression="externalContext.
> getNativeRequest().getSession().setAttribute('conversation' +
> flowExecutionContext.getKey().toString(), new
> net.shibboleth.idp.authn.impl.ExternalAuthenticationImpl(
> opensamlProfileRequestContext))" />
>
>
>             <evaluate expression="externalContext.
> getNativeRequest().getSession().setAttribute('username',
> requestParameters.username)" />
>
>
>
>         </on-render>
>
>         <transition to="ValidateExternalAuthentication" />
>
>     </view-state>
>
>
>
>     <action-state id="ValidateExternalAuthentication">
>
>         <evaluate expression="ValidateExternalAuthentication" />
>
>         <evaluate expression="'proceed'" />
>
>
>
>         <transition on="proceed" to="proceed" />
>
>     </action-state>
>
>
>
>     <bean-import resource="shibcas-authn-beans.xml" />
>
>
>
> </flow>
>
>
>
> On Wed, Sep 20, 2017 at 11:03 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> On 9/20/17, 4:22 AM, "users on behalf of Lalith Jayaweera" <
>> users-bounces at shibboleth.net on behalf of ljayaweera at gmail.com> wrote:
>>
>> > How to get the  custom param comes in the inital query string to IdP
>>
>> You'd probably have to add an inbound interceptor flow of your own
>> construction that accessed them and save them off somewhere for later use.
>>
>> -- Scott
>>
>>
>>
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170921/85c5e31b/attachment.html>


More information about the users mailing list