How to add HTTP query parameter to SAML2 SSO post response

[Dan Ciarniello]

Hacking the IDP is not what I want to do.  I already know how to do it by hacking.  I was hoping that there was an easy way to do it by adding something in /conf rather than modifying files in /system/conf.

Unfortunately, saying No is not always an option.  

Dan.

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Peter Schober
Sent: June 6, 2018 8:42 AM
To: users at shibboleth.net
Subject: Re: How to add HTTP query parameter to SAML2 SSO post response

* Dan Ciarniello <DCiarniello at central1.com> [2018-06-06 17:32]:
> I know that this is non-standard but be that is it may, I have the
> requirement that I have to deal with.

That also means every single deployer would have to hack their IDP
code in order to enable something that violates the spec -- what more
needs to happen before people Just Say No?

-peter
-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
This email and any attachments are strictly confidential, may be privileged, and are intended only for the use of the person(s) named above. Any other person is strictly prohibited from disclosing, distributing, copying or using it. If you are not the intended recipient (or are not receiving this communication on behalf of the intended recipient), please notify the sender immediately by return email or telephone call, and securely destroy this communication. Thank you.

Please reply to this message with "Unsubscribe" or "Unsubscribe All" in the subject line to unsubscribe from this mailing list or from all commercial electronic messages from Central 1.

If you choose to "Unsubscribe All", you will be removed from all future Central 1 electronic communications (e.g. texts; emails). If you want to stop receiving messages from this mailing list but want to continue receiving other messages from Central 1, reply with "Unsubscribe" instead.