Decrypting attributes on-the-fly

[Griffin Cheng [CLIB]]

Dear Mr. Cantor,



Sorry, I am a newbie to Shibboleth.  I do not understand what "plugin hook" is about and how the whole workflow can "attach" to it.  The problem is, the attribute in question is stored encrypted in the first place, using key that is not part of the Shibboleth itself.  Thank you.



Regards,



Griffin CHENG.


-----



On 2/6/14, 7:23 PM, "Griffin Cheng [CLIB]" <cscheng at cpce-polyu.edu.hk<mailto:cscheng at cpce-polyu.edu.hk>>

wrote:



>The question is: how can I decrypt this attribute on-the-fly, without

>changing the requesting application, which is a black box. I think I

>may be able to something during the attribute mapping but I have no

>clue for now.



Both the SP and the IdP have plugin hooks enabling this, but you'd have to write code, there really isn't anything else you can do.




-- Scott

-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20140207/dd64bdcf/attachment-0001.html