How to ask IdP for custom attributes in SAML

I made a small piece of code that sends a login and logout request and processes the corresponding responses using OpenSAML. If I am not mistaken, I have to get the user's attributes via SAML, but I don't know how to request these attributes. I don't know if this is an added XML snippet in my requests or some kind of trick in my IdP. I may be wrong and requesting attributes is a separate SAML request.

Thanks in advance.


source to share

2 answers

Attributes can be included in the original SAMLResponse IdP OR, or there can be a separate call to the AttributeQuery service if the IdP supports it.



Yes, this is a separate request. You need to create AttributeQuery.

See AttributeQuery



All Articles