<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
You should be able to modify the Metadata for the Azure IdP to add ?whr=<login-hint-domain> to the SingleSignOnService URLs, as long as you are hosting a copy locally that you can edit.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature" class="elementToProof" style="color: inherit;">
<p>-Elle Weintraub</p>
<p>Enterprise IT Architect</p>
<p>Enterprise Authentication Team Lead</p>
<p>Enterprise Authentication & Cloud Workspace</p>
<p>IT@Johns Hopkins</p>
<p>Johns Hopkins at Mt. Washington</p>
<p>5801 Smith Ave.</p>
<p>Davis Building Suite 3110B</p>
<p>Baltimore, MD 21209</p>
<p>E-mail: <a href="mailto:eweintra@jhmi.edu" style="margin-top: 0px; margin-bottom: 0px;">
eweintra@jhmi.edu</a></p>
<p>Pronouns: She, Her, Hers</p>
<p> </p>
<p><img id="imageSelected0" width="230" height="55" style="width: 230px; height: 55px; margin-top: 0px; margin-bottom: 0px;" data-outlook-trace="F:1|T:1" src="cid:2f0e7238-873e-49d2-91b3-e129512c9fd6"></p>
<p> <span style="color: rgb(0, 0, 0);"><a href="https://outlook.office.com/bookwithme/user/11769335e464489e904f6201df5ca964@jhmi.edu?anonymous&ep=pcard" style="margin-top: 0px; margin-bottom: 0px;">Book time with Elle Weintraub
</a></span></p>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott via users <users@shibboleth.net><br>
<b>Sent:</b> Monday, May 19, 2025 9:05 AM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Cantor, Scott <cantor.2@osu.edu><br>
<b>Subject:</b> Re: login_hint from shibboleth sp to azure idp</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText"><br>
External Email - Use Caution<br>
<br>
<br>
<br>
We do not support extending the request binding in the SP, only the XML message itself.<br>
<br>
I do know that Apache doesn't support controlling module order so that inherently makes it very hard to coordinate anything across two or more modules that are operating in the same general part of the request handling process.<br>
<br>
I'll probably look at supporting it in the Java code I'm building at some point, but adding a ticket for it is the best way to make sure I remember to do it.<br>
<br>
(JSHIBD is the project name).<br>
<br>
For years I thought the spec actually had disallowed this, and while it's a terrible idea in general, it's not actually precluded in the standard explicitly.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw">
https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>