Decrypting attributes on-the-fly

[Griffin Cheng [CLIB]]

Hello,

The institution I work for stores encrypted data (using GPG2) in one of the attributes.  After the authentication is successfully, the IdP passes the encrypted attribute and I need to do decrypt it on-the-fly and passes it down to another application (actually the requester).

This decrypted piece of data is actually used to identify the requestor on that application, which means that the application is using different set of the credentials used and the IdP somehow provides the mapping.

The question is: how can I decrypt this attribute on-the-fly, without changing the requesting application, which is a black box. I think I may be able to something during the attribute mapping but I have no clue for now.

Your help is very much appreciated.


Regards,


Griffin CHENG.
Telephone: 3746 0853

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20140207/19e09f8f/attachment.html