Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Ok, so I'm going to answer my own question. </p> <p>The answer to whether I can get that custom status from my IdP is a no, at the moment. :(</p> <p>But this is only because ADFS is not setup to capture it and pass it on. Apparently you need to do some custom coding for capturing information from the back channel that is opened between ADFS and the IdP.... well beyond the current scope of work.</p> <p>As a work around for the moment:</p> <ul> <li>If a request is made to the site and there is NO SAML token, its a new request by a user who has made no auth attempt at the Idp</li> <li>If there is a SAML token but no ID from the IdP in the token (which is only present when they auth properly), then the user failed Auth for some reason <ul> <li>If there is a SAML token with the ID present, the user auth'd properly</li> </ul></li> </ul> <p>Not great but acceptable. BTW, all credit goes to <a href="https://stackoverflow.com/users/738999/ymc">YMC</a> in this <a href="https://stackoverflow.com/questions/8526300/how-to-grab-serialized-in-http-request-claims-in-a-code-using-wif">SO</a> post for the following code which lets you check for SAML tokens:</p> <pre><code>void WSFederationAuthenticationModule_SecurityTokenReceived(object sender, SecurityTokenReceivedEventArgs e) { var message = SignInResponseMessage.CreateFromFormPost(Request) as SignInResponseMessage; var rstr = new WSFederationSerializer() .CreateResponse(message, new WSTrustSerializationContext( SecurityTokenHandlerCollectionManager.CreateDefaultSecurityTokenHandlerCollectionManager())); } </code></pre> <p>Pce!</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload