Passing information from Authentication Module to Resolvers

[cneberg]

Here is an example of someone else using this method.    They create a
new attribute based on the user's IP address, hide it a custom
principal and then allow it to be exacted in the resolver.

https://github.com/ukf/ua-attribute-idp-ext

-Christopher

On Mon, Aug 6, 2012 at 9:26 AM, Dergenski, Todd A. <TDergens at odu.edu> wrote:
> Hmm, I have not tried making a custom principal yet, but I have (miss)used
> the principal itself to move the information.  I will have to do some
> testing with that.
>
>
>
> Todd Dergenski
>
> Old Dominion University
>
> Senior Security Administrator
>
> 4700 Elkhorn Ave - Room 4300
>
> Norfolk, Va, 23529 USA
>
>
>
> (757) 683-4301
>
> tdergens at odu.edu
>
>
>
> From: dev-bounces at shibboleth.net [mailto:dev-bounces at shibboleth.net] On
> Behalf Of Paul Hethmon
> Sent: Monday, August 06, 2012 11:15 AM
> To: Shib Dev
> Subject: Re: Passing information from Authentication Module to Resolvers
>
>
>
> Todd,
>
>
>
> What I've done for this is to create a custom principal and data resolver.
> So the login module stores the attributes as name/value pairs in the custom
> principal. The data resolver looks for principals of that type. If it finds
> that type, then it extracts the attributes and makes them available to the
> Shib engine.
>
>
>
> Paul
>
>
>
> From: <Dergenski>, "Todd A." <TDergens at odu.edu>
> Reply-To: Shibboleth Dev <dev at shibboleth.net>
> Date: Monday, August 6, 2012 11:06 AM
> To: Shibboleth Dev <dev at shibboleth.net>
> Subject: Passing information from Authentication Module to Resolvers
>
>
>
> Hello All:
>
>     I am in the processes of updating our custom login module and I was
> wondering if there was any way to pass a variable from the authentication
> module to the resolvers?  Something along the lines of user selects ‘Accept’
> on our login screen and then that value is stored like
> requestContext.getPrincipalName so the resolvers can pull one attribute over
> another.  I’ve taken a look at
> (https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition)
> and see several interfaces defined, but I don’t see anything that would
> grant access to the session cookies or any other store.
>
>
>
> Todd Dergenski
>
> Old Dominion University
>
> Senior Security Administrator
>
> 4700 Elkhorn Ave - Room 4300
>
> Norfolk, Va, 23529 USA
>
>
>
> (757) 683-4301
>
> tdergens at odu.edu
>
>
>
>
>
>
>
> ________________________________
>
>
> Spam
> Not spam
> Forget previous vote
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net