How to customize AuthnRequest by scripting |

Scenario: Any -> Identify -> 2.0

In this login flow, Identify needs to send an AuthnRequest to an . The purpose of this task is to allow a customer to easily customize the AuthnRequest object right after it is created. You can view this as a PostAuthnRequestCreated event.

In this demonstration we will use ADFS as IdP

The AuthnRequest object that is highlighted above is the target we need to customize by scripting. Assume that we already setup a SAML 2.0 protocol connection for RP and a SAML SignOn Authentication for ADFS in Identify Web Administration – Connections.

Click on ADFS Local to open the edit connection page, scroll to bottom.

There is an AuthnRequest object customization text box that we can input our customization script to modify AuthnRequest object right after it is sent to IdP. At first, let this text box empty and perform a SignOn action, then capture SAMLRequest parameter and decode it.

Now let’s go back to edit ADFS Local connection and adjust AssertionConsumerServiceIndex property.

Save & Close and make a SignOn action again and see what is sent to ADFS Local. As what you see, the AuthnRequest has one more attribute AssertionConsumerServiceIndex and its value is 1.