<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10px"><div style="" class=""><span style="" class="">I am in complete agreement, but </span><span style="" class=""><span style="" class="">the application developer had asked me to return the status codes so he could respond/track them in some way. </span>I wanted to cover my bases to ensure I wasn't overlooking something before I said it can't be done. I have customized our Shibboleth error pages and I think that will be enough. </span></div><div style="color: rgb(0, 0, 0); font-size: 10px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,sans-serif; background-color: transparent; font-style: normal;" class=""><br><span style="" class=""></span></div><div style="color: rgb(0, 0, 0); font-size: 10px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida
Grande,sans-serif; background-color: transparent; font-style: normal;" class=""><span style="" class="">Thanks.<br style=""></span></div><div style="" class=""><br style="" class=""></div> <div class="" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 10px;"> <div class="" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12pt;"> <div style="" class="" dir="ltr"> <hr style="" class="" size="1"> <font style="" class="" size="2" face="Arial"> <b style="" class=""><span class="" style="font-weight:bold;">From:</span></b> Dave Perry <Dave.Perry@hull-college.ac.uk><br style="" class=""> <b style="" class=""><span class="" style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br style="" class=""> <b style="" class=""><span class="" style="font-weight: bold;">Sent:</span></b> Tuesday, September 23, 2014 11:51
AM<br style="" class=""> <b style="" class=""><span class="" style="font-weight: bold;">Subject:</span></b> RE: Accessing authentication response status code<br style="" class=""> </font> </div> <div style="" class=""><br style="" class=""><div style="" class="" id="yiv3439499606"><style style="" class="">#yiv3439499606 #yiv3439499606 --
_filtered #yiv3439499606 {font-family:Helvetica;panose-1:2 11 6 4 2 2 2 2 2 4;}
_filtered #yiv3439499606 {font-family:Helvetica;panose-1:2 11 6 4 2 2 2 2 2 4;}
_filtered #yiv3439499606 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
_filtered #yiv3439499606 {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;}
#yiv3439499606
#yiv3439499606 p.yiv3439499606MsoNormal, #yiv3439499606 li.yiv3439499606MsoNormal, #yiv3439499606 div.yiv3439499606MsoNormal
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}
#yiv3439499606 a:link, #yiv3439499606 span.yiv3439499606MsoHyperlink
{color:blue;text-decoration:underline;}
#yiv3439499606 a:visited, #yiv3439499606 span.yiv3439499606MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
#yiv3439499606 span.yiv3439499606EmailStyle17
{color:#1F497D;}
#yiv3439499606 .yiv3439499606MsoChpDefault
{font-size:10.0pt;}
_filtered #yiv3439499606 {margin:72.0pt 72.0pt 72.0pt 72.0pt;}
#yiv3439499606 div.yiv3439499606WordSection1
{}
#yiv3439499606 </style><div style="" class="">
<div style="" class="">
<div style="" class=""><span class="" style="font-size:11.0pt;">I could well be missing something here, but isn’t the point of Shibboleth protecting a webapp that the SP only gets involved in dishing up pages if it gets
an ‘OK you are a valid user’ session from the IdP? Excluding any verification of attributes etc by the SP itself?</span></div>
<div style="" class=""><span class="" style="font-size:11.0pt;"> </span></div>
<div style="" class=""><span class="" style="font-size:11.0pt;">I know there’s an SP error page, which you could possibly customise, but I’m not sure how dynamic it is or what it can trap.</span></div>
<div style="" class=""><span class="" style="font-size:11.0pt;"> </span></div>
<div style="" class=""><span class="" style="font-size:11.0pt;">The SP might log these errors for you, but for your app to be loosely work enough to get them I don’t know.</span></div>
<div style="" class=""><span class="" style="font-size:11.0pt;"> </span></div>
<div style="" class=""><span class="" style="font-size:11.0pt;"> </span></div>
<div style="" class=""><span class="" style="font-size:11.0pt;">Dave</span></div>
<div style="" class="">
<div style="" class=""><span class="" style="font-size:10.0pt;">_________________________________________________</span></div>
<div style="" class=""><span class="" style="font-size:10.0pt;">Dave Perry<br style="" class="" clear="none">
eLearning Technologist, Hull College Group<br style="" class="" clear="none">
<br style="" class="" clear="none">
Room L34 - Queens Gardens Library<br style="" class="" clear="none">
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG<br style="" class="" clear="none">
Extension 2230 / Direct Dial 01482 381930</span></div>
<div style="" class=""><span class="" style="font-size:10.0pt;"> </span></div>
<div style="" class=""><span class="" style="font-size:10.0pt;">* Need a fast reply? Try
<a style="" class="" rel="nofollow" shape="rect" ymailto="mailto:elearning@hull-college.ac.uk" target="_blank" href="mailto:elearning@hull-college.ac.uk">elearning@hull-college.ac.uk</a> *</span><span class="" style="font-size:10.0pt;"></span></div>
</div>
<div style="" class=""><span class="" style="font-size:11.0pt;"> </span></div>
<div style="" class="" id="yiv3439499606yqt26143"><div style="" class="">
<div class="" style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm;">
<div class="" style="margin-left:36.0pt;"><b style="" class=""><span class="" style="font-size:10.0pt;" lang="EN-US">From:</span></b><span class="" style="font-size:10.0pt;" lang="EN-US"> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net]
<b style="" class="">On Behalf Of </b>Rob Commarota<br style="" class="" clear="none">
<b style="" class="">Sent:</b> 23 September 2014 16:45<br style="" class="" clear="none">
<b style="" class="">To:</b> users@shibboleth.net<br style="" class="" clear="none">
<b style="" class="">Subject:</b> Accessing authentication response status code</span></div>
</div>
</div>
<div class="" style="margin-left:36.0pt;"> </div>
<div style="" class="">
<div style="" class="">
<div class="" style="margin-left:36.0pt;background:white;"><span class="" style="font-size:7.5pt;">Is there any way to access the authentication response status code outside of the error handling capabilities of
Shibboleth? The documentation is very clear on how to use statusCode, StatusCode2, and statusMessage in the error templates, but we'd like to something a little different if it is possible.</span></div>
</div>
<div style="" class="">
<div class="" style="margin-left:36.0pt;background:white;"><span class="" style="font-size:7.5pt;"> </span></div>
</div>
<div style="" class="">
<div class="" style="margin-left:36.0pt;"><span class="" style="font-size:7.5pt;">Our IdP is returning status code such as:</span></div>
</div>
<div style="" class="">
<div class="" style="margin-left:36.0pt;"><span class="" style="font-size:7.5pt;"> </span></div>
</div>
<div style="" class="">
<div class="" style="margin-left:36.0pt;"><span class="" style="font-size:7.5pt;">urn:securekey:names:tc:SAML:2.0:status:UserCancelled</span></div>
</div>
<div style="" class="">
<div class="" style="margin-left:36.0pt;"><span class="" style="font-size:7.5pt;">urn:securekey:names:tc:SAML:2.0:status:SystemUnavailable</span></div>
</div>
<div style="" class="">
<div class="" style="margin-left:36.0pt;"><span class="" style="font-size:7.5pt;">urn:securekey:names:tc:SAML:2.0:status:AuthnFailed</span></div>
</div>
<div class="" style="margin-left:36.0pt;background:white;"><span class="" style="font-size:7.5pt;"><br style="" class="" clear="none">
We'd like to be able to interpret these in the application to provide some direction for the end user. I thought I might be able to treat the status codes as attributes, but they really aren't attributes, so I am not sure that makes sense.</span></div>
<div style="" class="">
<div class="" style="margin-left:36.0pt;"><span class="" style="font-size:7.5pt;"> </span></div>
</div>
</div></div>
</div>
<div style="" class=""><hr style="" class=""></div><div style="" class=""><font style="" class="" size="2" color="#999999"><font style="" class="" face="Arial">This message is sent in confidence for the addressee </font><span class="" style="font-family:Arial;">only. It may contain confidential or sensitive </span><span class="" style="font-family:Arial;">information. The contents are not to be disclosed </span><span class="" style="font-family:Arial;">to anyone other than the addressee. Unauthorised </span><span class="" style="font-family:Arial;">recipients are requested to preserve this </span><span class="" style="font-family:Arial;">confidentiality and to advise us of any errors in </span><span class="" style="font-family:Arial;">transmission. Any views expressed in this message </span><span class="" style="font-family:Arial;">are solely the views of the individual and do
not </span><span class="" style="font-family:Arial;">represent the views of the College. Nothing in this </span><span class="" style="font-family:Arial;">message should be construed as creating a contract.</span></font></div><div style="" class=""><font style="" class="" size="2" color="#999999" face="Arial"><br style="" class="" clear="none"></font></div><div style="" class=""><font style="" class="" size="2" color="#999999" face="Arial">Hull College owns the email infrastructure, including the contents.</font></div><div style="" class=""><font style="" class="" size="2" color="#999999" face="Arial"><br style="" class="" clear="none"></font></div><div style="" class=""><font style="" class="" size="2" color="#00cc33" face="Arial">Hull College is committed to sustainability, please reflect before printing this email.</font></div><div style="" class=""><hr style="" class=""></div>
</div></div><br style="" class=""><div style="" class="" id="yqt83627">-- <br style="" class="" clear="none">To unsubscribe from this list send an email to <a style="" class="" shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></div><br style="" class=""><br style="" class=""></div> </div> </div> </div></body></html>