WSO2 Identity Server 5.3.0-如何获取联合身份验证器ID

Question

With some federated authenticator, let's say Facebook, after redirect back to Service Provider, how can I determine which federated authenticator got invoked?

I see that commonauth is invoked with https://localhost:9443/commonauth?idp= facebook &authenticator= FacebookAuthenticator &sessionDataKey=faaad26e-8bde-4a14-a865-c40546c4e22f, but what I should do next to forward those variables to my service provider?

Answer 1

Enable "Always send back the authenticated list of identity providers" in "Local & Outbound Authentication Configuration" of the service provider configuration in WSO2 Identity Server.

When you enable this option, you will receive a parameter called "AuthenticatedIdPs" with the login response. Base64 decode the received value to get list of authenticated idps. Below is a base64 decoded sample value.

{
   "typ":"JWT",
   "alg":"none"
}{
   "iss":"wso2",
   "exp":15119303538293000,
   "iat":1511930353829,
   "idps":[
      {
         "idp":"LOCAL",
         "authenticator":"BasicAuthenticator"
      }
   ]
}

Refer https://docs.wso2.com/display/IS530/Configuring+Local+and+Outbound+Authentication+for+a+Service+Provider for more information.