session storage

[Russell Beall]

I feel like I should have long ago known the answer to this question given all the custom shib plugin work I’ve done.  Somehow I have missed the right way to store an attribute on a user session and have run into trouble because I stored the information in the tomcat session object which isn’t being clustered.  So the data is being forgotten about when a user switches nodes or the tomcat session times out.  I’m still in V2-land by the way.

I’m storing a timestamp on the last successful 2FA event so it can be selectively reused, and I’d like to store it in the "edu.internet2.middleware.shibboleth.idp.session.Session” object, but that doesn’t seem to have a way to store properties.  Is there a storage service for such data?

Should I just be looking at a DataSealer-enabled cookie instead for this?

In a related question, if I match the timestamp of the 2FA event and link it to the ID of the edu.internet2.middleware.shibboleth.idp.session.Session, will that ID stay consistent through the duration of the IdP session for the user, which we currently have set to last for 8 hours?

Thanks very much,
Russ.

=========================
Russell Beall  |  Systems Programmer IV
Enterprise Identity Management | University of Southern California
(213) 740-7221  |  beall at usc.edu<mailto:beall at usc.edu>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20160224/d23a9617/attachment.html>