Not possible to get addition request parameters in SAML SSO SP Initiated flow

By: Vreixo Luis Gonzalez Caneda user 10 Nov 2022 at 11:30 a.m. CST

9 Responses
Vreixo Luis Gonzalez Caneda gravatar
Hi, Like it's described here we expect to get "extraParameters" in "sessionAtributes" but this field is always empty. As you can see in attached har server from microsoft is sending "username" field. https://gluu.org/docs/gluu-server/4.4/admin-guide/saml/#support-for-additional-request-parameters-in-sso-sp-initiated-flow We have followed the step of changing oxauth config and allow in section "authorizationRequestCustomAllowedParameters" the parameter "extraParameters". https://www.dropbox.com/s/aq81uo9w70t0y7y/auth.pre.whispeak.io_Archive%20%5B22-11-10%2018-22-49%5D.har?dl=0 In another installation made via docker it was working but we we're getting them like this not like in doc: ``` ServerUtil.getFirstValue(FacesContext.getCurrentInstance().getExternalContext().getRequest().getParameterMap(), "username") ``` Even for the "username" directly attached to the request it was working like this: ``` ServerUtil.getFirstValue(FacesContext.getCurrentInstance().getExternalContext().getRequest().getParameterMap(), "username") ``` We have tested in two instances one with 4.3.1 and with 4.4.1. Both are Ubuntu 20.04 with apt-get installed Gluu stacks. Instance that was working was installed via pygluu-dockercompose and running 4.3.X. Thank you very much for any insights to help us find the issue, Best regards
Gluu 4.4 Ubuntu 20.04
closed

Answers

By Dzouato Djeumen Rolain Bonaventure staff 10 Nov 2022 at 1:43 p.m. CST

Copy
Dzouato Djeumen Rolain Bonaventure gravatar
Hello Luis, Let me investigate this issue and get back to you. Not sure it was already implemented as of Gluu 4.3.1 but let me confirm and also make sure it works properly.

By Vreixo Luis Gonzalez Caneda user 14 Nov 2022 at 8:14 a.m. CST

Copy
Vreixo Luis Gonzalez Caneda gravatar
Hi Dzouato, Thanks for testing this. Indeed we have tested with 4.4.1 but it's not working either and we find this quite strange as we had access to the username in an old docker installation of the 4.3.x. We are printing all the request parameters and this variable is not there.

By Dzouato Djeumen Rolain Bonaventure staff 25 Nov 2022 at 12:13 a.m. CST

Copy
Dzouato Djeumen Rolain Bonaventure gravatar
Hello Luis, During the migration to Shibboleth IDP version 4.2.1 , some changes were made that broke that feature. It has been fixed and we'll have new docker images built shortly. Thank you.

By Vreixo Luis Gonzalez Caneda user 25 Nov 2022 at 5 a.m. CST

Copy
Vreixo Luis Gonzalez Caneda gravatar
Nice to know, thanks for your answer. Regarding Ubuntu distribution do you know when this will be updated? There is a specific version number to expect with the fix? Thank you very much

By Dzouato Djeumen Rolain Bonaventure staff 25 Nov 2022 at 9:48 a.m. CST

Copy
Dzouato Djeumen Rolain Bonaventure gravatar
Actually for Ubuntu, you could try now, but it will require re-install. - Install the debian package of Gluu CE but don't run setup yet. - Download the shibboleth static configuration files [here](https://jenkins.gluu.org/maven/org/gluu/oxShibbolethStatic/4.4.1.Final/oxShibbolethStatic-4.4.1.Final.jar) and replace the file `/opt/dist/gluu/shibboleth-idp.jar` in the Gluu CE container. The command could be something like `sudo cp oxShibbolethStatic-4.4.1.Final.jar /opt/gluu-server/opt/dist/gluu/shibboleth-idp.jar` if you don't want to login into the container to perform the operation. - Download the Shibboleth IDP [war](https://jenkins.gluu.org/maven/org/gluu/oxshibbolethIdp/4.4.1.Final/oxshibbolethIdp-4.4.1.Final.war) , and do the same as above for the file `/opt/dist/gluu/idp.war` - Download the oxTrust [war](https://jenkins.gluu.org/maven/org/gluu/oxtrust-server/4.4.1.Final/oxtrust-server-4.4.1.Final.war) and do the same as above for the file `/opt/dist/gluu/identity.war` - You can now run the setup as it will use the updated files and perform a proper installation. I hope this helps

By Bruno Flament named 30 Nov 2022 at 8:48 a.m. CST

Copy
Bruno Flament gravatar
Hello Dzouato the installation is KO, the setup.py script says that no service is selectable for installation, by the way I can't change. Can you help me ? Have i missed a step ? ``` root@auth-pre-whispeak-io:~# apt install gluu-server Reading package lists... Done Building dependency tree Reading state information... Done The following held packages will be changed: gluu-server The following packages will be upgraded: gluu-server 1 upgraded, 0 newly installed, 0 to remove and 15 not upgraded. Need to get 1743 MB of archives. After this operation, 12.9 MB of additional disk space will be used. Do you want to continue? [Y/n] Y Get:1 https://repo.gluu.org/ubuntu focal/main amd64 gluu-server amd64 4.4.2~ubuntu20.04 [1743 MB] Fetched 1743 MB in 1min 24s (20.9 MB/s) (Reading database ... 223442 files and directories currently installed.) Preparing to unpack .../gluu-server_4.4.2~ubuntu20.04_amd64.deb ... Checking to make sure Gluu Server is down... Unpacking gluu-server (4.4.2~ubuntu20.04) over (4.4.1~ubuntu20.04) ... Setting up gluu-server (4.4.2~ubuntu20.04) .. 'oxShibbolethStatic-4.4.2.Final.jar' -> '/opt/dist/gluu/shibboleth-idp.jar' 'oxshibbolethIdp-4.4.2.Final.war' -> '/opt/dist/gluu/idp.war' 'oxtrust-server-4.4.2.Final.war' -> '/opt/dist/gluu/identity.war' $ md5sum *4.4.2* 03dab350fec6bb57bdbfb09635ef0ea1 oxShibbolethStatic-4.4.2.Final.jar d7a8a719b241676fab7f7952b558c479 oxshibbolethIdp-4.4.2.Final.war db607873ae337f02f2d1a2e7b2145e66 oxtrust-server-4.4.2.Final.war ``` $ ./setup.py screenshoot: https://postimg.cc/WqkV0LMx ![enter image description here](https://postimg.cc/WqkV0LMx "enter image title here")

By Bruno Flament named 01 Dec 2022 at 7:55 a.m. CST

Copy
Bruno Flament gravatar
Hi my bad, its necessary to do a fresh install. Regards

By Dzouato Djeumen Rolain Bonaventure staff 05 Dec 2022 at 12:41 a.m. CST

Copy
Dzouato Djeumen Rolain Bonaventure gravatar
No problem Bruno . Just touching base here , to make sure it's working as expected.

By Vreixo Luis Gonzalez Caneda user 17 May 2023 at 12:03 p.m. CDT

Copy
Vreixo Luis Gonzalez Caneda gravatar
Hi, We have installed 4.5 also for an Ubuntu VM and we still don't have anything returned by extraParameters. Can you confirm us that we should obtain the information via: "identity.getSessionId().getSessionAttributes()" as stated in the docs: https://gluu.org/docs/gluu-server/4.5/admin-guide/saml/#support-for-additional-request-parameters-in-sso-sp-initiated-flow We are printing all session attributes after allowing "extraParameters" but is still not there. Thank you very much, Regards

Post an answer