<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1486670884650_2419"><span>Thanks, Scott. You answered my question with your first response.</span></div> <div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: Courier New, courier, monaco, monospace, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"><font size="2" face="Arial"> On Thursday, February 9, 2017 11:45 AM, "Cantor, Scott" <cantor.2@osu.edu> wrote:<br></font></div> <br><br> <div class="y_msg_container">> I have an iDP that has this endpoint in their metadata:<br clear="none"><br clear="none">The bindings are explicit about the parameters they permit, so really, no, that's not allowed. I imagine people do it, I don't know exactly what the SP does with it. In your example, you're running into something that's generally viewed as iffy anyway, using POST with a form action containing a query string.<br clear="none"><br clear="none">> After authN comes back to my SP, I see this:<br clear="none"><br clear="none">I don't understand what I'm looking at, that's not the SP, is it?<div class="yqt8697966497" id="yqtfd19045"><br clear="none"><br clear="none">> So the question is, why does it drop that parm? Is this not allowed for an<br clear="none">> endpoint?</div><br clear="none"><br clear="none">I don't understand what is dropping what. Once it reaches the IdP, it's out of the SP's hands and the next SP access is to the AssertionConsumerService at the SP.<br clear="none"><br clear="none">-- Scott<br clear="none"><br clear="none">-- <br clear="none">To unsubscribe from this list send an email to <a shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><div class="yqt8697966497" id="yqtfd46619"><br clear="none"></div><br><br></div> </div> </div> </div></div></body></html>