Access principal name from servlet filter

[Cantor, Scott]

On 8/21/15, 3:14 AM, "dev on behalf of Etienne Dysli-Metref" <dev-bounces at shibboleth.net on behalf of etienne.dysli-metref at switch.ch> wrote:
>
>> I'd have to know the specific need for the data to understand the
>> best place to point somebody now. The best "single" answer to this
>> would be the PRC->SubjectContext->getPrincipalName() but that's only
>> there "after" all of the authentication sequence runs.
>
>What I'd like to do is set a cookie containing the username of the
>currently logged in user. There is another application on the same
>server as the IdP that reads this cookie to display appropriate support
>contacts.

Ok, in that case the answer to the question of who the logged in user is would be above.

>I agree it feels rather weird to put this logic into a filter that runs
>even before authentication. If now in v3 there is a better place to do
>this (flow action? intercept flow?), I'd be happy to use it.

Either it would have to be a filter, and you'd have to use some tricks to get at the web flow conversation state, or it could be a post-authentication intercept. Anything else would require modifying system files.

-- Scott