Allow displaying SimpleSAMLphp errors on a Drupal themed page [#2982930]

On SimpleSAMLphp SP errors the displayed error message is confronting for a non-technical user (which is most users).

Error messages occur even on semi-regular events. e.g. my IdP is ADFS based, and it covers users @example.com. If a user tries to login to that IdP as myemail@gmail.com then the IdP sends the SP back <samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"/></samlp:Status> - "the request could not be performed due to an error on the part of the SAML responder or SAML authority" - and SimpleSAMLphp displays the attached error page.

Ideally I'd like to be able to display error messages like this Drupal side with the site theme that users are expecting.

Comment	File	Size	Author
#10	simplesamlphp_auth.2982930.redirect_sp_errors_to_drupal.v2.patch	6.32 KB	absoludo
#7	simplesamlphp_auth.2982930.redirect_sp_errors_to_drupal.v2.patch	7.3 KB	nephinj
#6	patches_simplesamlphp_auth_2982930_redirect_sp_errors_to_drupal_v2.patch	7.29 KB	nephinj
#5	simplesamlphp_auth.2982930.redirect_sp_errors_to_drupal.v2.patch	7.49 KB	nephinj
#4	simplesamlphp_auth.2982930.redirect_sp_errors_to_drupal.v2.patch.txt	7.49 KB	nephinj
#2	simplesamlphp_auth.2982930.redirect_sp_errors_to_drupal.v1.patch	7.29 KB	George Bills
	scary simplesamlphp error.PNG	59.47 KB	George Bills

Comments

Comment #1

2 July 2018 at 07:25

George Bills created an issue. See original summary.

Comment #2

George Bills commented 2 July 2018 at 07:31

Status	File	Size
new	simplesamlphp_auth.2982930.redirect_sp_errors_to_drupal.v1.patch	7.29 KB

Patch attached that works my side. The patch provides a route for and method on SimplesamlphpAuthController that displays an error message. The method builds up a nice error message and calls a theme fn to output a template on the page. Drupal developers can override the template.twig.html or MYTHEME_preprocess_simplesamlphp_error to customise the displayed error. Instructions on how to implement the redirect back-to-Drupal SP side are included in the README.md.