Requests

Supported Request Parameters

• wa

  Must have a value of wsignin1.0

• wtrealm

  Realm of the relying party. If not present, will fall back to wres

• wreply

  Url to return to after sign in. If invalid or not present, will fallback to the first available Redirect URI on the client record

• wctx

  Context to be round tripped back to the relying party

• wfresh

  When wfresh has a value of 0, the user will be re-authenticated, despite any existing sessions. This is similar to OpenID Connect's prompt=login and SAML's ForceAuthn

• whr

  The requested external identity provider. This is used to bypass home realm discovery (HRD). This is similar to OpenID Connect's idp value in acr_values

Example Request

/wsfed?wa=wsignin1.0&wtrealm=rp1&wreply=http://rp1.test

(encoding removed for readability)