login_hint from shibboleth sp to azure idp

Cantor, Scott cantor.2 at osu.edu
Mon May 19 13:05:07 UTC 2025


We do not support extending the request binding in the SP, only the XML message itself.

I do know that Apache doesn't support controlling module order so that inherently makes it very hard to coordinate anything across two or more modules that are operating in the same general part of the request handling process.

I'll probably look at supporting it in the Java code I'm building at some point, but adding a ticket for it is the best way to make sure I remember to do it.

(JSHIBD is the project name).

For years I thought the spec actually had disallowed this, and while it's a terrible idea in general, it's not actually precluded in the standard explicitly.

-- Scott




More information about the users mailing list