<div dir="ltr">Funny you say that, they are our competition :). I have done it already with Shibboleth 2 by appending the id I needed in the POST or Redirect URL, but Shibboleth 3 is more complex in terms of URL mapping, although a custom spring webflow handler would probably do the job. I hoped there might be a better way to do it.</div><div class="gmail_extra"><br><div class="gmail_quote">On 8 January 2016 at 13:26, Dave Perry <span dir="ltr"><<a href="mailto:Dave.Perry@hull-college.ac.uk" target="_blank">Dave.Perry@hull-college.ac.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-GB" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">There was a service mentioned recently which did something like this (an SP that acted as a proxy). I can’t remember the name of it, and have deleted the emails.
PingOne maybe?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Dave<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1f497d">_________________________________________________<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1f497d">Dave Perry<br>
eLearning Technologist, Hull College Group<br>
<br>
Room L34 - Queens Gardens Library<br>
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG<br>
Extension 2230 / Direct Dial 01482 381930<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1f497d">* Need a fast reply? Try
<a href="mailto:elearning@hull-college.ac.uk" target="_blank"><span style="color:blue">elearning@hull-college.ac.uk</span></a> *<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> users [mailto:<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>]
<b>On Behalf Of </b>Bogdan Albei<br>
<b>Sent:</b> 08 January 2016 13:12<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: How can an SP send extra information to the IdP<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">That is true, but we are integrating with certain SPs, such as Office 365, for multiple customers. We need to know, as part of our workflow, on behalf of which customer the authorisation is requested. Identifying
by entity id won't work because of the one-to-many relationship between the SP and the customers on behalf of which we integrate with that SP.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">On 8 January 2016 at 12:51, Tom Scavo <<a href="mailto:trscavo@internet2.edu" target="_blank">trscavo@internet2.edu</a>> wrote:<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:36.0pt">On Fri, Jan 8, 2016 at 4:43 AM, Bogdan Albei <<a href="mailto:bogdan.albei@callsign.com" target="_blank">bogdan.albei@callsign.com</a>> wrote:<br>
><br>
> We are an IdP that integrates with various SPs on behalf of our customers.<br>
> Let's say we have customer A and customer B that both want us to act as an<br>
> IdP and provide authentication for Office 365. The problem is when we<br>
> receive a SAML request from Office 365(the SP). At that point we need to<br>
> know if that request is made on behalf of customer A or customer B. How<br>
> could the SP send that extra information?<br>
<br>
The SAML AuthnRequest contains the globally unique entityID of the SP<br>
making the request (or more accurately, the SP wishing a response). So<br>
no "extra information" is needed.<br>
<span style="color:#888888"><br>
<span>Tom</span><br>
<span>--</span><br>
<span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a></span></span><u></u><u></u></p>
</div>
<p class="MsoNormal" style="margin-left:36.0pt"><br>
<br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>
</div>
<p class="MsoNormal" style="margin-left:36.0pt">-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="color:#888888">Bogdan Albei</span><u></u><u></u></p>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="color:#888888">Senior Platform Engineer<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="color:#888888">Callsign Inc.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><span style="color:#888888">[C] bogdan<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></div>
<div>
<font color="#999999" size="2">
<span style="font-family:Arial"><a href="http://www.hull-college.ac.uk/about-us/stakeholders-newsletter" target="_blank">The Review Newsletter</a></span> </font></div><div><font color="#999999" size="2"><br>
<font face="Arial">This message is sent in confidence for the addressee </font>
<span style="font-family:Arial">only. It may contain confidential or sensitive </span>
<span style="font-family:Arial">information. The contents are not to be disclosed </span>
<span style="font-family:Arial">to anyone other than the addressee. Unauthorised </span>
<span style="font-family:Arial">recipients are requested to preserve this </span>
<span style="font-family:Arial">confidentiality and to advise us of any errors in </span>
<span style="font-family:Arial">transmission. Any views expressed in this message </span>
<span style="font-family:Arial">are solely the views of the individual and do not </span>
<span style="font-family:Arial">represent the views of the College. Nothing in this </span>
<span style="font-family:Arial">message should be construed as creating a contract.</span>
</font>
</div>
<div>
<font face="Arial" color="#999999" size="2">
<br>
</font>
</div>
<div>
<font face="Arial" color="#999999" size="2">Hull College Group owns the email infrastructure, including the contents.</font>
</div>
<div>
<font face="Arial" color="#999999" size="2">
<br>
</font>
</div>
<div>
<font face="Arial" size="2" color="#00CC33">Hull College Group is committed to sustainability, please reflect before printing
this email.</font>
</div>
<div>
<hr>
</div>
</div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><span style="color:rgb(136,136,136)">Bogdan Albei</span><div style="color:rgb(136,136,136)">Senior Platform Engineer</div><div style="color:rgb(136,136,136)">Callsign Inc.</div><div style="color:rgb(136,136,136)">[C] bogdan</div><div><br></div></div></div></div></div></div></div></div></div></div></div>
</div>