Can I access query parameters in Velocity templates?

[Wessel, Keith]

Well, shucks. I was hoping the answer was simply "no, that's not possible." But given the danger of an open redirector or the complexity of trying to add rules to prevent such redirection, I think we have a good reason to still say no. Good to know that this feature exists, though.

Thanks,
Keith


-----Original Message-----
From: Scott Cantor <scott at restingparrotsoftware.com> 
Sent: Tuesday, April 21, 2026 1:48 PM
To: Wurbs, Holger <holger.wurbs at hs-duesseldorf.de>
Cc: Shib Users <users at shibboleth.net>; Wessel, Keith <kwessel at illinois.edu>
Subject: Re: Can I access query parameters in Velocity templates?



> On Apr 21, 2026, at 2:45 PM, Wurbs, Holger <holger.wurbs at hs-duesseldorf.de> wrote:
> 
> Hello,
> 
> I might misunderstand the purpose but isn't that something you specifically added to the IdP?
> 
> Looking at this: https://urldefense.com/v3/__https://shibboleth.net/pipermail/commits/2020-April/045492.html__;!!DZ3fjg!4INOCwK3aPVQJljpzfrDODdTQIpbiEkiGI0yTd2e7ER7myQX-MzSZoT10cRUNmtBBgCpFEsEY61lAmEpSL4BlcbE4OY$ 
> 
> The idea is to set the following property to true:
> 
> idp.logout.preserveQuery = true
> 

Totally forgot we added that for that flow at least, thanks.

-- Scott