Developing login plugin

[Cantor, Scott]

On 11/19/19, 9:11 AM, "dev on behalf of Joseph Fischetti" <dev-bounces at shibboleth.net on behalf of Joseph.Fischetti at marist.edu> wrote:

> My question revolves around calling the attribute resolver, I’ve included some code below.  I currently have it
> working, but I want to make sure it’s working correctly based on the way the IdP is plumbed.

Mostly. I would stuff the contexts under the AuthenticationContext to keep them safely isolated, but as long as it's cleaning itself up, that's not a big deal.

> High level:  The flow is called and it looks at the c14n principal name from the profileContext that’s passed to it.

That won't work for pre-existing sessions, use the CanonicalPrincipalNameLookupStrategy function as a default to acquire the value, that handles both cases. That's what Duo uses.

-- Scott