redirect the post

Timothy Spear n614cd at gmail.com
Mon Aug 11 18:35:26 UTC 2025


A very bad hack, but it worked when I was doing some POC work (I was using
a hidden cookie to switch between IdP with alternate configs).
I used a Java proxy server code as the basis. But I just wrote a simple
servlet to take the incoming SP request, and generate an HTML page back to
the browser with the correct URL to send the request to the correct
location.

When I tried to use an alias inside the web server (Apache in my case)
before submitting the request to the IdP application server, it did not
work. Ran into a number of security issues with URI context problems.

Tim



On Mon, Aug 11, 2025 at 2:21 PM <coupons at sccoast.net> wrote:

> A SP is using an old metadata that points to
> "/rem/profile/SAML2/POST/SSO", is there a way to redirect the post to
> "/idp/profile/SAML2/POST/SSO" on the IdP end temporarily?
> Fast fix until the metadata is scheduled/updated.
>
>
> ~Dave
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250811/345b3608/attachment.htm>


More information about the users mailing list