Login_hint parameter with Azure

[Pierre Soundi]

So we have to re-implement everything and not use Shibboleth, I thought there was a way to send an additional query parameter to the IdP like the RelayState one for example, to have something like :

https://iis.sp.com/contrats/12345?login_hint=foo.bar@me.onmicrosoft.com
to
https://login.microsoftonline.com/95692347-1944-41b4-a8da-f6a946d053a7/saml2?SAMLRequest=fZJB...%3D&RelayState=ss%3Amem%3A...&login_hint=foo.bar@me.onmicrosoft.com

________________________________
De : Cantor, Scott <cantor.2 at osu.edu>
Envoyé : lundi 21 mars 2022 14:14
À : Pierre Soundi <pierresoundi at hotmail.com>; Shib Users <users at shibboleth.net>
Objet : Re: Login_hint parameter with Azure

On 3/21/22, 10:13 AM, "Pierre Soundi" <pierresoundi at hotmail.com> wrote:

>    Thank you for your quick answer. So if I want to do it myself (send a query parameter the SP received to the
> IdP, the "login_hint"), do you have any idea how I can do this please ?

You generate your own SAML requests and leave the SP out of it.

-- Scott


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220321/380086ac/attachment.htm>