<div dir="ltr"><div class="gmail_signature"><div class="gmail_signature">Hi Team,</div><div class="gmail_signature"> I need your thoughts on below IDP's behavior, </div><div class="gmail_signature"> We have SP 2.6 and when sending <authnrequest> to one of our registered IDP, the attributes like "TARGET", "RelayState", "SAMLRequest", "SAMLResponse", "SAMLart", "SigAlg" are encoded within a form as hidden fields in "bindingTemplate.html" and the form is submitted along with authn request. This is happening only for specific IDP's and I am not sure why this is happening. </div><div class="gmail_signature"> In Shib shar log I can spot this difference -</div><div class="gmail_signature"> IDP 1 sends attributes in hiddden form</div><div class="gmail_signature"><span style="white-space:pre"> </span>DEBUG OpenSAML.MessageEncoder.SAML2POST : message encoded, <b>sending</b> <b>HTML form template to client</b></div><div class="gmail_signature"><span style="white-space:pre"> </span>DEBUG Shibboleth.Listener : dispatching message <b>(new_shib/Login::run::SAML2SI)</b></div><div class="gmail_signature"><br></div><div class="gmail_signature"> IDP 2 sends attributes in browser post</div><div class="gmail_signature"><span style="white-space:pre"> </span>DEBUG OpenSAML.MessageEncoder.SAML2Redirect : message encoded, <b>sending redirect to client</b></div><div class="gmail_signature"><span style="white-space:pre"> </span>DEBUG Shibboleth.Listener : dispatching message <b>(new_shib/SAML2/POST)</b></div><div class="gmail_signature"><br></div><div class="gmail_signature"> So let me know my guess is correct,</div><div class="gmail_signature"><ul><li> In IDP 1 the SSO attributes are encoded within a hidden form and it is sent to the corresponding IDP via POST.<br></li><li> In IDP 2 the SSO attributes are sent via POST headers.<br></li></ul></div><div class="gmail_signature"><span style="white-space:pre"> </span> So what makes the SP to behave in this way ?? </div><div class="gmail_signature"><span style="white-space:pre"> </span> </div><div class="gmail_signature">Thanks in advance,</div><div class="gmail_signature">Satheesh</div></div>
</div>