search

IdentityServer / IdentityServer2

[deprecated] Thinktecture IdentityServer is a light-weight security token service built with .NET 4.5, MVC 4, Web API and WCF.
Other
410 stars 291 forks source link

Pass whr to Identity Provider #877

Closed huysentruitw closed 8 years ago

huysentruitw commented 8 years ago

We have an ADFS with multiple Claim Provider Trusts. IdentityServer2 sits in the middle, between our application and this ADFS instance.

Now, we want to configure ADFS as Identity Provider on the IdentityServer2, but I don't see how we can force it to send a whr parameter along for selecting the correct Claim Provider on the ADFS.

Adding a whr parameter to the WS-Federation Endpoint url obviously doesn't work.

Is this scenario supported? Or any other way to work-around this?

brockallen commented 8 years ago

I don't recall us supporting this in IdSvr2 -- you can either change the source, or somehow hook the outbound response with an http module.

huysentruitw commented 8 years ago

I've hacked the code a little so I can configure the WS-Federation endpoint with additional ?whr=whatever parameter. Then this value gets extracted and used to set the message.HomeRealm property during sign-in.