SAML proxy of IdP to Azure - c14 + requester questions

[Cantor, Scott]

> Noting that it says the document hasn't been updated for v4.1+

That's why you should use the documentation itself.

https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1282539600/SAMLAuthnConfiguration

It's covered there.

> When checking the process log, as it checks against each Attribute Filter, it is showing a
> request value of the IdP's entityID.

Yes. The SP in that step is the "IdP" (your IdP). The IdP is Azure. So the requester is you and the issuer is the Azure entityID. That's inbound filtering, and is covered in the documentation.

> I'm not clear why it has seemingly 'lost' the original resource URL requested

The original resource URL is in no way ever known, that's not part of SAML. If your attribute acceptance inbound depends on the identity of the original SP (not the URL), then that is possible to build rules against that via the ProxiedRequester matchers, but generally it doesn't, it's normally just based on the issuer, and there are full set of rules included for that.

-- Scott