ACS URL or maybe post-auth target redirect?

[Nate Klingenstein]

Carl,

> As my Plan A, I am trying to get my IdP, after authentication, to call my own …/rest/consume, instead of the Shibboleth.sso/SAML2/POST that it is going to now.

If I'm interpreting you correctly, you're trying to use Shibboleth as just an AuthnRequest generator and a system that can speak the DS protocol, and then consume the assertion and manage trust relationships yourself?  It seems like a slightly complex way to go about things and there are probably much easier ways to get that done without using the full Shibboleth SP, and the usual caveats about writing your own authentication and authorization software apply.

Take care,
Nate

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id