How to ask IdP for user attributes in SAML

Question

I have done a small piece of code which sends login and logout request and processes the corresponding responses using OpenSAML. If I'm not wrong I am supposed to be able to retrieve user attributes through SAML but I don't know how to ask for these attributes. I don't know if it is an added piece of XML in my requests or some kind of tweak in my IdP. Perhaps I'm wrong and asking for attributes is a separate SAML request.

Thanks in advance.

score 4 · Answer 1 · answered Mar 20 '12 at 11:59

4

Attributes can be included in the IdP's initial SAMLResponse OR there can be a separate AttributeQuery service call if the IdP supports it.

answered Mar 20 '12 at 11:59

JST

1,154
6
15

Thanks. How can I make them to be included in that initial response? – Rafa Mar 20 '12 at 12:22

score 1 · Answer 2 · edited Aug 11 '15 at 02:21

1

Yes it is separate request. You need to create AttributeQuery.

See AttributeQuery

edited Aug 11 '15 at 02:21

Community

1
1

answered Mar 20 '12 at 10:38

Stugal

850
1
8
24

How to ask IdP for user attributes in SAML

2 Answers2