How to add HTTP query parameter to SAML2 SSO post response

[Dan Ciarniello]

Hi, Peter

I know that this is non-standard but be that is it may, I have the requirement that I have to deal with.

I do know one way to do it but it would involve changing a system configuration file which, for obvious reasons, I don't want to do. 

Basically, I would extend HTTPPostEncoder and set it as the class for shibboleth.Encoders.SAML2PostEncoder in system/conf/saml-binding-config.xml.  I would rather override the encoder in conf/<somefile> but I haven't been able to figure out how to do that.

I was hoping that somebody on the list would be able to give me a better option.  Or tell me how to override the encoder without changing saml-binding-config.xml.

Thanks,
Dan Ciarniello

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: June 6, 2018 1:35 AM
To: users at shibboleth.net
Subject: Re: How to add HTTP query parameter to SAML2 SSO post response

* Dan Ciarniello <DCiarniello at central1.com> [2018-06-05 23:00]:
> I have an SP requirement to add an HTTP query parameter to the SAML2
> SSO POST response but I cannot see any easy way to do so.

SAML does not allow adding arbitrary stuff to SAML protocol messages,
other than via extensions within the XML, AFAIK.

-peter
-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
This email and any attachments are strictly confidential, may be privileged, and are intended only for the use of the person(s) named above. Any other person is strictly prohibited from disclosing, distributing, copying or using it. If you are not the intended recipient (or are not receiving this communication on behalf of the intended recipient), please notify the sender immediately by return email or telephone call, and securely destroy this communication. Thank you.

Please reply to this message with "Unsubscribe" or "Unsubscribe All" in the subject line to unsubscribe from this mailing list or from all commercial electronic messages from Central 1.

If you choose to "Unsubscribe All", you will be removed from all future Central 1 electronic communications (e.g. texts; emails). If you want to stop receiving messages from this mailing list but want to continue receiving other messages from Central 1, reply with "Unsubscribe" instead.