11
Views
2
Comments
[IdP] How to include the ProtocolBinding parameter in the AuthN request?
idp
Web icon
Forge asset by João Barata
Application Type
Traditional Web

I had a question about the release notes from version 5.0.10:

  • Added the Optional ProtocolBinding parameter to the AuthRequest, this should increase compatibility with more identity providers

The note states that we should be able to send the ProtocolBinding parameter, but I was not able to find it in the UI. I see the parameter for the Single Sign-On Bind but not for the AuthN request ProtocolBinding. The new parameter that I am looking for should say with what protocol binding the IdP should respond to the ACS URL with the SAML response.

I am on the latest release (5.0.14).

2020-10-08 19-51-35
João Barata
Staff

Hi @Harry Shyket,

When I mentioned the "Optional ProtocolBinding" parameter, I mentioned "Optional" as per the SAML spec.
From version 5.0.10 forward, the component now adds the "ProtocolBinding" field to the auth requests with the value POST, hinting the external identity providers to reply using POST.
Regards,

UserImage.jpg
Harry Shyket

Thank you! I was able to find the parameter in the SAML tracer.  I was initially thinking it was a configuration parameter, but now see it goes out with every request.

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.