Hi Dan, I think I am not clear ... can you provide any example?

The resulting hidden form looks like this: <form method="post" action="https://sp.example.com/SAML2/SSO/POST" ...> <input type="hidden" name="SAMLResponse" value="response" /> <input type="hidden" name="RelayState" value="token" /> ... <input type="submit" value="Submit" /> </form> The value of the SAMLResponse parameter is the base64 encoding of a <samlp:Response> element I'm wondering if I can customize that form so that the gluu server includes a couple other form fields? I've simulated this by acting more or less as a proxy and having gluu post to my page and then I add the xtra fields and post to the SP but would like to have the gluu server include them itself.

I'm expecting the answer is no and I would be better served to have the SP change the code on their end to expect the extra values to be encoded in the SAMLResponse but I wanted to look into it anyway.

>> I'm expecting the answer is no I can't answer yes or no yet because I haven't understood what you are doing or why. :-)