Re: Can extra attribute be passed from SP?

Normally, specific service providers have their own provider IDs, and 
this provider ID is part of the AuthnRequest already. Perhaps you can 
use this provider ID as the service ID? Perhaps you could use some 
combination of the SP and IDP providerIDs to generate a principal-id 
(rather than a random unique identifier)

-David Waite


On May 19, 2004, at 12:52 AM, Rukkandan, Lakshmi wrote:

>
> Now, I would like to send "Service ID" as an extra parameter, when 
> federation is requested from specific Service Provider as part of the 
> <AuthnRequest>. Is it possible to do so? Or is there any other means, 
> to pass this information from SP to IDP?
>
> I need to do this, as I'm maintaning same Federation store (LDAP 
> Server) to write both SP and IDP federation information. When 
> federation occurs, I randomly generate a unique identifier called 
> "Principal-Id" under which I store each of the federation information.