Template page for the WAYF page

The Where Are You From (WAYF) page is used at the service provider. The WAYF page enables users to select their identity provider if there is more than one configured in the federation.

When a user arrives at a service provider, a WAYF identifier can be delivered through a cookie or query-string parameter with the request. The entity ID of the identity provider is stored as the value of the cookie or query-string parameter. If the WAYF identifier cookie or query-string parameter is not present, the WAYF page opens.

An example URL that includes the query string parameter for WAYF:

https://sp.host.com/isam/sps/samlfed/saml20/
logininitial?RequestBinding=HTTPRedirect&ResponseBinding
=HTTPPost&ITFIM_WAYF_IDP=https://idp.host.com/isam/sps/samlfed/saml20

This example is for a SAML 2.0 single sign-on URL. The query string parameter name is ITFIM_WAYF_IDP. The value of the identity provider ID is https://idp.host.com/isam/sps/samlfed/saml20.

The WAYF page requires the user to indicate where they came from. If the user is not logged on to their identity provider, they are asked to log on. Depending on the attributes passed, the service provider can grant or deny access to the service.

We can find the template pages for WAYF in the local management interface using these steps:

1. Click Federation > Global Settings > Template Files.
2. Expand the locale folder and navigate to /pages/itfim/wayf.

Administrators can use the WAYF page without modifications, but in some cases might want to modify the HTML style to match the specific deployment environment.

This template file provides several replacement macros:

@WAYF_FORM_ACTION@

This macro is replaced with the endpoint of the original request. This macro does not belong within a repeatable section.

@WAYF_FORM_METHOD@

This macro is replaced with the HTTP method of the original request. This macro does not belong within a repeatable section.

@WAYF_FORM_PARAM_ID@

This macro is replaced with ID used by the action for the identity provider. This macro is repeated once for each identity provider.

@WAYF_IP_ID@

This macro is replaced with the unique ID of the identity provider. This macro is repeated once for each identity provider.

@WAYF_IP_DISPLAY_NAME@

This macro is replaced with the configured display name of the identity provider. This macro is repeated once for each identity provider.

@WAYF_HIDDEN_NAME@

This macro is replaced with the name of the hidden parameter. This macro is repeated once for each original request parameter and is hidden.

@WAYF_HIDDEN_VALUE@

This macro is replaced with the value of the hidden parameter. This macro is repeated once for each original request parameter and is hidden.

Parent topic: Customize SAML 2.0 pages