Is an SP initiated SSO SAML request is sent to the light_saml_idp.login route, the POST data is lost after Drupal redirects you through GET, resulting in a 403.

We should save $_POST['SAMLRequest'] before redirecting to /user/login to be able to use that later in the light_saml_idp.login route.

CommentFileSizeAuthor
#4 3085174-1.patch3.61 KBjohankleene

Comments

MrHaroldA created an issue. See original summary.

  • MrHaroldA committed b0e732e on 8.x-1.x 
    Issue #3085174: Keep POST data after login
mrharolda’s picture

mrharolda commented
Status: Active » Needs review
johankleene’s picture

johankleene commented
Category: Feature request » Bug report
StatusFileSize
new 3085174-1.patch3.61 KB

On login currently only the SAMLRequest parameter is saved in session. This patch also saves the RelayState temporarily in a session parameter. Without it the parameter is lost when relaying back to the SP.

mrharolda’s picture

mrharolda commented
Status: Needs review » Fixed

Tnx, Johan!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.