OpenConext/Mujina — pull request #5 by ingebrigt (2014-10-13 14:04:19+00:00)
Title: api on idp to set ACS endpoint

Hi, and thanks for sharing Mujina.

I'm developing an SSO solution with Big-ip as the SP and use Mujina as part of my test rig.
( btw, we deploy Mujina in docker and shared a project for this: https://github.com/olesu/docker-mujina )

Anyways, I ran into closed issue https://github.com/OpenConext/Mujina/issues/2
I could not find a good way to configure the Big-ip SP to send the ACS endpoint in the authrequest (as Mujina IdP currently requires).

My pull request adds an IdP api to set the ACS endpoint the IdP will redirect UA's back to.

Things to consider before pulling:
-Use of the api overrides any values set in AuthnRequests. This can easily be changed to the other way around.
-I haven't (yet) added code in the reset API to clear the ACS endpoint. I volunteer to do this.
-Possibly the API would be more complete and simpler to use if it relied on metadata import files. But this would have required me to parse XML and support SLS, SLR (and redirect binding for ACS/SLS/SLR?) according to urn:oasis:names:tc:SAML:2.0:metadata

cheers,
Ingebrigt