Re: Handling a SAML POST response

2017-09-28 Thread Colin McGuigan
Yes. You were entirely correct, that missing question mark was the problem. I feel more than a little silly for missing that. The entire thing now works end to end. Thank you all again for your assistance. -- Sent from: http://apache-guacamole-incubating-users.2363388.n4.nabble.com/

Re: Handling a SAML POST response

2017-09-28 Thread Nick Couchman
On Thu, Sep 28, 2017 at 12:20 PM, Colin McGuigan < colin_guacam...@walkingshadows.org> wrote: > Nick; > > Thanks for all your help. Let me elaborate. > > When I say I have a REST service, it's just as you described -- a WS > annotated class that is returned from the authentication provider's >

Re: Handling a SAML POST response

2017-09-28 Thread Colin McGuigan
Nick; Thanks for all your help. Let me elaborate. When I say I have a REST service, it's just as you described -- a WS annotated class that is returned from the authentication provider's getResource method. I can call this REST service just fine, and know that it works. This service takes in

Re: Handling a SAML POST response

2017-09-28 Thread Nick Couchman
> > >> So, I think the approach you need to take is that, within the SAML >> extension itself, you need to create a REST endpoint that consumes handles >> a POST call to it, processes the data from the POST, and then translates >> that to the correct call to /guacamole/api/tokens to tell Guacamole

Re: Handling a SAML POST response

2017-09-27 Thread Nick Couchman
On Wed, Sep 27, 2017 at 6:31 PM, Nick Couchman wrote: > > > On Wed, Sep 27, 2017 at 5:35 PM, Colin McGuigan walkingshadows.org> wrote: > >> So I went ahead and created an external web service that internally calls >> /guacamole/api/tokens, and then redirects

Re: Handling a SAML POST response

2017-09-27 Thread Nick Couchman
On Wed, Sep 27, 2017 at 5:35 PM, Colin McGuigan < colin_guacam...@walkingshadows.org> wrote: > So I went ahead and created an external web service that internally calls > /guacamole/api/tokens, and then redirects to /guacamole/#/token= > When you say you created an external web service, what do

Re: Handling a SAML POST response

2017-09-27 Thread Colin McGuigan
So I went ahead and created an external web service that internally calls /guacamole/api/tokens, and then redirects to /guacamole/#/token= Doesn't work. Investigation of the network traffic shows that the /guacamole/api/tokens call does not have the token in it at all (in Mike's OpenID

Re: Handling a SAML POST response

2017-09-26 Thread Colin McGuigan
Thanks for the answers; I certainly didn't expect it to be so quick! > Do you have the code available somewhere - github or something like that? > I'd be happy to download it and take a look at what's happening. Unfortunately, no, it's just POC at this point. > Out of curiosity, is this

Re: Handling a SAML POST response

2017-09-22 Thread Mike Jumper
On Fri, Sep 22, 2017 at 2:39 PM, Colin McGuigan < colin_guacam...@walkingshadows.org> wrote: > tldr: The SAML POST body is getting thrown away, and I don't know how to > keep > that from happening. > > Longer: I'm writing a SAML authentication extension, based off of Mike > Jumper's OpenID

Re: Handling a SAML POST response

2017-09-22 Thread vnick
Colin McGuigan wrote > tldr: The SAML POST body is getting thrown away, and I don't know how to > keep > that from happening. > > Longer: I'm writing a SAML authentication extension, based off of Mike > Jumper's OpenID extension: > https://github.com/mike-jumper/guacamole-auth-openid Do you have

Handling a SAML POST response

2017-09-22 Thread Colin McGuigan
tldr: The SAML POST body is getting thrown away, and I don't know how to keep that from happening. Longer: I'm writing a SAML authentication extension, based off of Mike Jumper's OpenID extension: https://github.com/mike-jumper/guacamole-auth-openid I have successfully set up Mike Jumper's