A SAML Connection template that sends the AssertionConsumerServiceURL
attribute where the ACS URL is not hardcoded:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
Destination="@@Destination@@"
AssertionConsumerServiceURL="@@AssertionConsumerServiceURL@@"
ID="@@ID@@"
IssueInstant="@@IssueInstant@@"
ProtocolBinding="@@ProtocolBinding@@"
Version="2.0">
<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
@@Issuer@@
</saml:Issuer>
</samlp:AuthnRequest>
In the above template the default @@AssertServiceURLAndDestination@@
template variable (that provides the Destination
attribute and maybe the AssertionConsumerServiceURL
based on the tenant flag) is replaced with explicit Destination
and AssertionConsumerServiceURL
attributes, each with their own template variable.