<div dir="ltr"><div>I'm afraid to know the answer to this.</div><div><br></div><div>I have the following LoginHandler defined:</div><div><br></div><div><div> <ph:LoginHandler xsi:type="ph:ExternalAuthn" </div>
<div> externalAuthnPath="/authn/external/SHSession"></div><div> <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod></div>
<div> </ph:LoginHandler></div></div><div><br></div><div>I'm trying to use this in conjunction with the Unsolicited SSO. My servlet sitting at "/Authn/external/SHSession" requires a parameter as part of the request.</div>
<div><br></div><div>I'm kicking off my request process by making a GET request to the following path (note the 'key' param):</div><br><div>/idp/profile/SAML2/Unsolicited/SSO?providerId=<a href="https://sp.testshib.org/shibboleth-sp&key=88e389d28ec7bce2d7ffda0e3981a7de">https://sp.testshib.org/shibboleth-sp&key=88e389d28ec7bce2d7ffda0e3981a7de</a><br>
</div><div><br></div><div>My servlet tries to extract the param with the name 'key'. It's not there (no params are)</div><div><br></div><div>I notice in the idp process logs that it states:</div><div>"Redirecting user to authentication engine at <a href="https://idp.machine:443/idp/AuthnEngine">https://idp.machine:443/idp/AuthnEngine</a>"</div>
<div>"Authenticating user with login handler of type edu.internet2.middleware.shibboleth.idp.authn.provider.ExternalAuthnSystemLoginHandler"</div><div>"Forwarding authentication request to /authn/external/SHSession"</div>
<div><br></div><div>So my questions...</div><div><br></div><div>1. Do I have any options for getting params to my servlet within the Shibbothleth framework? </div><div><br></div><div>2. The redirect to AuthnEngine is making me think the answer to #1 is no. If that's the case, any suggestions for hacks?</div>
<div><br></div><div>3. Would using the UsernamePassword handler make this any easier?</div><div><br></div><div>4. If the answer is no for all of the above, am I heading down the path of a custom ... thing?</div><div><br>
</div>
<div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevCustomExtension">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevCustomExtension</a><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevCustomAuthentication">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevCustomAuthentication</a><br>
</div><div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler</a><br></div><div><br></div><div><br></div></div>