Passing information from Authentication Module to Resolvers

[Paul Hethmon]

Todd,

What I've done for this is to create a custom principal and data resolver. So the login module stores the attributes as name/value pairs in the custom principal. The data resolver looks for principals of that type. If it finds that type, then it extracts the attributes and makes them available to the Shib engine.

Paul

From: <Dergenski>, "Todd A." <TDergens at odu.edu<mailto:TDergens at odu.edu>>
Reply-To: Shibboleth Dev <dev at shibboleth.net<mailto:dev at shibboleth.net>>
Date: Monday, August 6, 2012 11:06 AM
To: Shibboleth Dev <dev at shibboleth.net<mailto:dev at shibboleth.net>>
Subject: Passing information from Authentication Module to Resolvers

Hello All:
    I am in the processes of updating our custom login module and I was wondering if there was any way to pass a variable from the authentication module to the resolvers?  Something along the lines of user selects ‘Accept’ on our login screen and then that value is stored like requestContext.getPrincipalName so the resolvers can pull one attribute over another.  I’ve taken a look at (https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition) and see several interfaces defined, but I don’t see anything that would grant access to the session cookies or any other store.

Todd Dergenski
Old Dominion University
Senior Security Administrator
4700 Elkhorn Ave - Room 4300
Norfolk, Va, 23529 USA

(757) 683-4301
tdergens at odu.edu<mailto:tdergens at odu.edu>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120806/00d3ce1e/attachment.html