How to ask IdP for custom attributes in SAML
I made a small piece of code that sends a login and logout request and processes the corresponding responses using OpenSAML. If I am not mistaken, I have to get the user's attributes via SAML, but I don't know how to request these attributes. I don't know if this is an added XML snippet in my requests or some kind of trick in my IdP. I may be wrong and requesting attributes is a separate SAML request.
Thanks in advance.
+3
Rafa
source
to share
2 answers
Attributes can be included in the original SAMLResponse IdP OR, or there can be a separate call to the AttributeQuery service if the IdP supports it.
+4
JST
source
to share
Yes, this is a separate request. You need to create AttributeQuery.
See AttributeQuery
+1
Stugal
source
to share