Shibboleth SP: Extract saml2p:Response

[Boyd, Todd M.]

I suppose I’m used to dealing with the Shibboleth ISAPI filter… I’m assuming there is something similar that is done with Apache if that’s your HTTP server.


-Todd

From: Boyd, Todd M.
Sent: Thursday, March 12, 2020 3:47 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: Shibboleth SP: Extract saml2p:Response

Shibboleth isn’t written in PHP, it’s written in Java. I don’t think you’ve articulated what you want to do, or perhaps you misunderstand where in the process you should be doing it. Shibboleth SP can map attributes to server headers if you want, and then you could use PHP to extract those server headers in your application.

-Todd

From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> On Behalf Of Charlie Mos
Sent: Thursday, March 12, 2020 3:07 PM
To: Shib Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: Shibboleth SP: Extract saml2p:Response

CAUTION!: This email originated from outside of Columbia College.
A cloud service is passing attributes in the 'saml2p:Response' to a Shibboleth SP (both connected to our IdP).

In the Shibboleth SP -- is there a way via PHP to extract the saml2p:Response'?

<saml2p:Response SNIP
<saml2:Assertion SNIP
<saml2:Attribute Name="FOO">
            <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="xs:string">BAR</saml2:AttributeValue>
         </saml2:Attribute>
      </saml2:AttributeStatement>
   </saml2:Assertion></saml2p:Response>


--
---
CM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200312/2a46cd36/attachment.html>