Page Comparison

When using another site as Identity Provider, and Ceptor as Service Provider to that site, the following additional query/post parameters can be specified when calling the URL that triggers this plugin:

• binding
  Specify binding, can be passive, redirect or POST - default is passive.
• RelayState
  If this parameter is present in the request, it is added to the request towards the Identity Provider.
• signrequest
  For redirect/POST binding, specify if SAML request should be signed or not - default is true.
• encryptrequest
  For redirect/POST binding, specify if SAML request should be encrypted or not - default is false.

For passive binding (which is the default), the redirect to the Identity Providers federation URL will be done, adding these query parameters: 

• wa=wsignin1.0
• id=passive
• wtrealm=<identifier name>
• wreply=<return url>
• wct=<current timestamp>
• RelayState=<relayState input parameter if not empty>

For the passive binding, no SAML Request will be transmitted.

for redirect / GET binding, the redirect to the Identity Providers federation URL will be done, adding the following query parameters:

• SAMLRequest=<deflated SAML request, base64 encoded>
• RelayState=<relayState input parameter if not empty>

Note that the SAML request will be signed/encrypted according to the query/POST input parameters signrequest and encryptrequest.

for POST binding, a form is return that autosubmits sending a POST requst to the Identity Providers federation URL with the following parameters:

• SAMLRequest=<base64 encoded SAML request>
• RelayState=<relayState input parameter if not empty>

Note that the SAML request will be signed/encrypted according to the query/POST input parameters signrequest and encryptrequest.