<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap:break-word"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">I’m attempting to setup SSO with a SP that requires IdP-initiated sessions. This is not a problem; typically I craft a URL of the form:</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"><a href="https://shib.bucknell.edu/idp/profile/SAML2/Unsolicited/SSO?providerId=entityId">https://shib.bucknell.edu/<font face="helvetica Neue, helvetica"><span style="font-size:14px">idp/profile/SAML2/Unsolicited/SSO?</span></font>providerId=entityId</a></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto">However this SP that I am working with wants the session response to be in the form of a POST in the following format:</div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"><br></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"><span style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal"><form action=’</span><a href="https://bucknell.photoshelter.com/sso/SAML2/TEST/POST%E2%80%99" rel="noreferrer" target="_blank" style="color:rgb(17,85,204);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal">https://bucknell.photoshelter.com/sso/SAML2/TEST/POST%E2%80%99</a><span style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal"> method=post></span><br style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal"><div style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal;margin-left:20px"><p dir="auto" style="line-height:22px;margin:15px 0px"><input type=’hidden’ name=’SAMLResponse’ value=’{base64 encoded XML assertion}’></p></div><div style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal;margin-left:20px"><p dir="auto" style="line-height:22px;margin:15px 0px"><b><input type=’hidden’ name=’CERT’ value=’{base64 encoded DER X.509 certificate}’></b></p></div><div style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal;margin-left:20px"><p dir="auto" style="line-height:22px;margin:15px 0px"><input type=’hidden’ name=’IDPID’ value=’{IDP entityId}’></p></div><span style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal"></form></span><br style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal"></div><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px;color:rgba(0,0,0,1.0);margin:0px;line-height:auto"><span style="color:rgb(43,46,47);font-family:'Lucida Sans Unicode','Lucida Grande',Tahoma,Verdana,sans-serif;font-size:14px;font-variant-ligatures:normal"><br></span></div><div id="bloop_customfont" style="margin:0px"><span style="font-variant-ligatures:normal"><font face="Helvetica"><font color="#2b2e2f"><span style="font-size:14px">If I’m reading this correctly, it looks as if the SP wants the XML assertion, the X.509 cert, and the IdP’s entityId in discreet values in the POST. The normal SAML2 response from Shibboleth includes these items, just not in this format (I believe). Is it possible for the POST to be presented as the SP requests through a normal Shibboleth configuration or would this require custom code?</span></font></font></span></div><div id="bloop_customfont" style="margin:0px"><span style="font-variant-ligatures:normal"><font face="Helvetica"><font color="#2b2e2f"><span style="font-size:14px"><br></span></font></font></span></div><div id="bloop_customfont" style="margin:0px"><span style="font-variant-ligatures:normal"><font face="Helvetica"><font color="#2b2e2f"><span style="font-size:14px">Thanks for any help you can provide.</span></font></font></span></div><div id="bloop_customfont" style="margin:0px"><span style="font-variant-ligatures:normal"><font face="Helvetica"><font color="#2b2e2f"><span style="font-size:14px"><br></span></font></font></span></div><div id="bloop_customfont" style="margin:0px"><span style="font-variant-ligatures:normal"><font face="Helvetica"><font color="#2b2e2f"><span style="font-size:14px">Mike</span></font></font></span></div><br><div id="bloop_sign_1497318431429195008" class="bloop_sign"></div></body></html>