<div dir="ltr"><div>Requesting community's thoughts on best approach for following scenario:</div><div><br></div><div>I have an SP configured to protect several domains (each representing a different application) and also an IDP configured with an external login handler. Single sign-on works perfectly fine. I would like to add some additional functionality on the IDP (all custom code that I am writing) that would require a token be sent by the SP/protected app during the authentication flow. What is the best way to make this token available to my custom login handler?</div>
<div><br></div><div>To be more clear, heres what I'd like:</div><div><br></div><div>1. user goes to URL in browser <a href="https://myapp.mybiz.com/foo?token=abcd1234">https://myapp.mybiz.com/foo?token=abcd1234</a></div>
<div>2. SP intercepts and begins taking user through SSO flow</div><div>3. redirect occurs to IDP</div><div>4. IDP forwards request to configured login handler</div><div>5. login handler (custom Java code) somehow gets the token</div>
<div><br></div><div>It's step 5 that I'm unclear as to the best way to do that. The token (well really, I'd like the whole URL) gets lost in the redirects, but I was hoping that the original URL would be sent to the IDP and that I'd somehow have that info available to my custom code.</div>
<div><br></div><div>Is this possible? Any thoughts or direction greatly appreciated.</div><div><br></div><div>Dan</div><br>
</div>