[keycloak-user] SAML2.0 Identity Provider modify authn context / extensions

[Hynek Mlnarik]

The latter, you need to extend SAMLIdentityProvider. I'd suggest adding extensions to the AuthnRequest via SAML2AuthnRequestBuilder.addExtension() method rather than supplying query params for the sake of simplicity.

--Hynek

On 02/23/2017 05:17 PM, Martin Hardselius wrote:
> Hi,
>
> Is there an easy way to add stuff to the authn context or add extensions to
> the AuthN request? Or even add query parameters to the destination url?
>
> Context:
>
> The SAML2.0 Provider I'm integrating with supports several auth methods.
> Usually you would end up on a method select page, where the options are
> presented to you, once you've been forwarded to the IDP. They do however
> support selecting an option directly by modifying the authncontext. They
> also support prefilling information by adding extensions to the authn
> request or adding supplying it through query params. Kind of like "login
> hint".
>
> So. Easy way, or do I have to extend SAMLIdentityProvider?
>
> Martin
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>