How to ask IdP for custom attributes in SAML

I made a small piece of code that sends a login and logout request and processes the corresponding responses using OpenSAML. If I am not mistaken, I have to get the user's attributes via SAML, but I don't know how to request these attributes. I don't know if this is an added XML snippet in my requests or some kind of trick in my IdP. I may be wrong and requesting attributes is a separate SAML request.

Thanks in advance.

+3


source to share


2 answers


Attributes can be included in the original SAMLResponse IdP OR, or there can be a separate call to the AttributeQuery service if the IdP supports it.



+4


source


Yes, this is a separate request. You need to create AttributeQuery.



See AttributeQuery

+1


source







All Articles