Displaying the username requested by Microsoft

[Scott Cantor]

> On Mar 24, 2026, at 9:04 AM, Max Nuding via users <users at shibboleth.net> wrote:
> 
> I'd prefer something more sensible, but I cannot control that end. So I'm stuck with what I have.

I'm aware, but you asked a question and I answered, that's all I can do.

> Do you happen to have any overview on how to do a custom inbound interceptor flow?

That probably isn't the best way for something simple. Every SAML profile configuration now has a messageHandler setting that takes a Function<MessageContext,Exception> and it could be injected with the servlet request supplier to pull out the parameter, and they run during the inbound stage (and possibly outbound I think). 

Beyond that is member support.

> https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199511979/ProfileHandling#Authoring-and-Enabling-Intercepts is not very useful.

Yes, "too few organizations paying for the software" leads to incomplete documentation, expecially for the sorts of things people tell us over and over they would never be able to handle anyway (e.g., Java extensions).

We have to prioritize docs for the features people want to use and assume developers can figure other things out, as with most open source projects.

-- Scott