Passing information from Authentication Module to Resolvers

[Russell Beall]

I'm developing a simple custom principal to use for this, but instead of a custom resolver, I just use scripted attribute definitions from within the standard resolver config. That is an option, because the scriptlets are capable of understanding the custom principal type. 

Russ.
(iPhone)


On Aug 6, 2012, at 9:02 AM, cneberg <cneberg at gmail.com> wrote:

> Here is an example of someone else using this method.    They create a
> new attribute based on the user's IP address, hide it a custom
> principal and then allow it to be exacted in the resolver.
> 
> https://github.com/ukf/ua-attribute-idp-ext
> 
> -Christopher
> 
> On Mon, Aug 6, 2012 at 9:26 AM, Dergenski, Todd A. <TDergens at odu.edu> wrote:
>> Hmm, I have not tried making a custom principal yet, but I have (miss)used
>> the principal itself to move the information.  I will have to do some
>> testing with that.
>> 
>> 
>> 
>> Todd Dergenski
>> 
>> Old Dominion University
>> 
>> Senior Security Administrator
>> 
>> 4700 Elkhorn Ave - Room 4300
>> 
>> Norfolk, Va, 23529 USA
>> 
>> 
>> 
>> (757) 683-4301
>> 
>> tdergens at odu.edu
>> 
>> 
>> 
>> From: dev-bounces at shibboleth.net [mailto:dev-bounces at shibboleth.net] On
>> Behalf Of Paul Hethmon
>> Sent: Monday, August 06, 2012 11:15 AM
>> To: Shib Dev
>> Subject: Re: Passing information from Authentication Module to Resolvers
>> 
>> 
>> 
>> Todd,
>> 
>> 
>> 
>> What I've done for this is to create a custom principal and data resolver.
>> So the login module stores the attributes as name/value pairs in the custom
>> principal. The data resolver looks for principals of that type. If it finds
>> that type, then it extracts the attributes and makes them available to the
>> Shib engine.
>> 
>> 
>> 
>> Paul
>> 
>> 
>> 
>> From: <Dergenski>, "Todd A." <TDergens at odu.edu>
>> Reply-To: Shibboleth Dev <dev at shibboleth.net>
>> Date: Monday, August 6, 2012 11:06 AM
>> To: Shibboleth Dev <dev at shibboleth.net>
>> Subject: Passing information from Authentication Module to Resolvers
>> 
>> 
>> 
>> Hello All:
>> 
>>    I am in the processes of updating our custom login module and I was
>> wondering if there was any way to pass a variable from the authentication
>> module to the resolvers?  Something along the lines of user selects ‘Accept’
>> on our login screen and then that value is stored like
>> requestContext.getPrincipalName so the resolvers can pull one attribute over
>> another.  I’ve taken a look at
>> (https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition)
>> and see several interfaces defined, but I don’t see anything that would
>> grant access to the session cookies or any other store.
>> 
>> 
>> 
>> Todd Dergenski
>> 
>> Old Dominion University
>> 
>> Senior Security Administrator
>> 
>> 4700 Elkhorn Ave - Room 4300
>> 
>> Norfolk, Va, 23529 USA
>> 
>> 
>> 
>> (757) 683-4301
>> 
>> tdergens at odu.edu
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> ________________________________
>> 
>> 
>> Spam
>> Not spam
>> Forget previous vote
>> 
>> 
>> --
>> To unsubscribe from this list send an email to
>> dev-unsubscribe at shibboleth.net
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net