on IDS how to tell from which URL user is coming..

[vm_luotonen]

Hi

I have following situation. I have a need to offer user PKI authentication either with Card or with name/password.. I have formed following though...

1. User hit URL host1.domain.com and gets customized Name/Password authentication screen where is link to PKI authentication screen.
2. User presses link to PKI auth when requesting PKI auth
3. Session is redirected to pki.domain.com url, which has in Auth contract PKI authntication required..
4. User is authenticated with PKI
5. AT THIS Point is PROBLEM.. How to redirect user back to url which he was hitting before authentication..

I have an idea, that I would have the url of user (which he was hitting before on first authentication) On IDS. Then I could add to custom login page dynamic link host1.domain.com/pki (depending from what page he is redirected to IDS from) instead of statical pki.domain.com

Then I could have authorization rules for each host to look for /pki path with PKI contract and redirect back to host user was hitting in first place ( / )


HAVE anyone any idea on this problem...

If I would have a possiblity to pass some variables before authentication is happened to IDS this wouldn't be an issue...

Cheers
Veli-Matti