Need to post an extra parameter along with samlResponse to SP

[Nguyen, Thai]

Hello,

I have an IdP working with a few SPs.
I am current stuck with a new SP that requires to post an extra parameter along with samlResponse.
This SP is using IdP unsolicited SSO feature. I had configured so that when user click:
https://myidp.example.org/idp/SAML2/Unsolicitied/SSO?providerId=https://sp.external.org
My IdP generated samlResponse and post it to SP’s ACS url correctly.
However, the mentioned SP required that an extra parameter need to post with samlResponse.
Ex: https://sp.external.org/SSO?samlResponse=Base64EncodedSamlResponse&extraParameter=some static value

Is it possible to configure IdP to add the extra parameter?
Please share some guidances.

Thanks in advance,

Nguyen, Thai
tqnguyen-YPR7u1h/VASHXe+***@public.gmane.org

[Cantor, Scott]

Post by Nguyen, Thai
I have an IdP working with a few SPs.
I am current stuck with a new SP that requires to post an extra parameter
along with samlResponse.

Then it's in violation of SAML's binding rules.

Post by Nguyen, Thai
Is it possible to configure IdP to add the extra parameter?

Not unless you hack it to always send a fixed value by
modifying/overriding the binding template, or you change the code.

Post by Nguyen, Thai
Please share some guidances.

You should not do this, that's my guidance.

-- Scott