How to retrieve SP required attributes at the IDP before authentication (Paul Hethmon)

[Dierick Bart]

No; in my loginhandler I just need to know wich attributes the Service Provider needs. What I'm going to do is: 

1) the Service Provider forwards to the IDP 
2) the IDP chooses my loginhandler 
3) my loginhandler creates and shows a servlet. That servlet ask for authentication AND it shows which attributes the Service Provider needs. So the loginhandler got to know the required attributes. 
4) the user authenticates AND provides the required attributes as viewed in the servlet
5) the authentication is completed, the attributes are PUSHED to the Service Provider. 


So the loginhandler needs the info about the required attributes so that the user can provide these attributes. 

So you suggest and says that this (is only) possible with the metadata of the SP? 

Greetings
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120321/70363d16/attachment.html