Add static/custom attribute with ACS Url

Santu Ghosh mon.snahasish at gmail.com
Wed Feb 7 13:40:20 EST 2018


Hi All,

I need help on ACS URL configuration.

I have an SP with entityId *https://xxx.com/shibboleth-sp
<https://xxx.com/shibboleth-sp>*.
More than 4 IdP are connected with my SP. Among them 3 using SP initiated
and one used IdP initiated authentication. Now the IDP who use IdP
initiated flow try to execute SP's ACE URL i,e,
https://xxx.com/shibboleth-sp in their end.

After executing above mentioned url , user of that Idp are redirected to
error page. Because when SP received the requested url in ACS location, SP
is unable to distinguished IDP's identity. As a result they are redirected
to error page.

Is it possible to add an custom/static parameter with the ACS URL ?

in my metadata (SP) *AssertionConsumerService* declaration looks like :


*<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://xxx.com/shibboleth-sp/saml/SSO
<https://xxx.com/shibboleth-sp/saml/SSO>" index="0" isDefault="true"/>*
*<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
Location="https://xxx.com <http://xxx.com>/shibboleth-sp/saml/SSO"
index="1"/>*

Please help.

-- 
Snahasish
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180207/681e7d55/attachment.html>


More information about the users mailing list