login_hint from shibboleth sp to azure idp

[Elle Weintraub]

You should be able to modify the Metadata for the Azure IdP to add ?whr=<login-hint-domain> to the SingleSignOnService URLs, as long as you are hosting a copy locally that you can edit.


-Elle Weintraub

Enterprise IT Architect

Enterprise Authentication Team Lead

Enterprise Authentication & Cloud Workspace

IT at Johns Hopkins

Johns Hopkins at Mt. Washington

5801 Smith Ave.

Davis Building Suite 3110B

Baltimore, MD 21209

E-mail: eweintra at jhmi.edu<mailto:eweintra at jhmi.edu>

Pronouns: She, Her, Hers



[cid:2f0e7238-873e-49d2-91b3-e129512c9fd6]

 Book time with Elle Weintraub <https://outlook.office.com/bookwithme/user/11769335e464489e904f6201df5ca964@jhmi.edu?anonymous&ep=pcard>

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott via users <users at shibboleth.net>
Sent: Monday, May 19, 2025 9:05 AM
To: Shib Users <users at shibboleth.net>
Cc: Cantor, Scott <cantor.2 at osu.edu>
Subject: Re: login_hint from shibboleth sp to azure idp


      External Email - Use Caution



We do not support extending the request binding in the SP, only the XML message itself.

I do know that Apache doesn't support controlling module order so that inherently makes it very hard to coordinate anything across two or more modules that are operating in the same general part of the request handling process.

I'll probably look at supporting it in the Java code I'm building at some point, but adding a ticket for it is the best way to make sure I remember to do it.

(JSHIBD is the project name).

For years I thought the spec actually had disallowed this, and while it's a terrible idea in general, it's not actually precluded in the standard explicitly.

-- Scott


--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250519/f4e17a55/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-lwtjkiue.gif
Type: image/gif
Size: 5481 bytes
Desc: Outlook-lwtjkiue.gif
URL: <http://shibboleth.net/pipermail/users/attachments/20250519/f4e17a55/attachment.gif>