<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>If you wanting Shibboleth IdP to resolve and populate attributes prior to authentication, then no, it is not designed to support that. It's not clear to me if you are wanting the list of requested attributes for a particular SP or a list of the attribute
values for an SP for a particular user. You would have access to the list of requested attributes as stored in the metadata file for the SP inside of your login handler.</div>
<div><br>
</div>
<div>If you are more talking about the attribute values, then the only way to do that would be to resolve them your self during authentication. I do this myself as my authentication process returns information about the user. I then put that information in
the session where my custom attribute resolver gets them when Shib runs the attribute code.</div>
<div><br>
</div>
<div>Does that help?</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Dierick Bart <<a href="mailto:bart.dierick@hotmail.com">bart.dierick@hotmail.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>Shibboleth Dev <<a href="mailto:dev@shibboleth.net">dev@shibboleth.net</a>><br>
<span style="font-weight:bold">Date: </span>Wed, 21 Mar 2012 16:47:46 +0100<br>
<span style="font-weight:bold">To: </span>Shibboleth Dev <<a href="mailto:dev@shibboleth.net">dev@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>How to retrieve SP required attributes at the IDP before authentication<br>
</div>
<div><br>
</div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="font-family: Verdana; font-size: 13px; "><br style="widows: 2; text-transform: none; background-color: rgb(255, 255, 255); text-indent: 0px; font: normal normal normal 13px/normal verdana, geneva, helvetica, arial, sans-serif; white-space: normal; orphans: 2; letter-spacing: normal; color: rgb(0, 0, 0); word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<span style="line-height: normal; widows: 2; text-transform: none; text-indent: 0px; display: inline !important; white-space: normal; orphans: 2; float: none; letter-spacing: normal; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">1)
Is it possible to provide the required SP attributes before the authentication?<span class="Apple-converted-space"> </span></span><br style="widows: 2; text-transform: none; background-color: rgb(255, 255, 255); text-indent: 0px; font: normal normal normal 13px/normal verdana, geneva, helvetica, arial, sans-serif; white-space: normal; orphans: 2; letter-spacing: normal; color: rgb(0, 0, 0); word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<span style="line-height: normal; widows: 2; text-transform: none; text-indent: 0px; display: inline !important; white-space: normal; orphans: 2; float: none; letter-spacing: normal; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">2)
What is the best (if I need the attributes in my loginhandler)? Get them out of the metadata of the SP or in the authentication request by value or reference?<span class="Apple-converted-space"> </span></span><br style="widows: 2; text-transform: none; background-color: rgb(255, 255, 255); text-indent: 0px; font: normal normal normal 13px/normal verdana, geneva, helvetica, arial, sans-serif; white-space: normal; orphans: 2; letter-spacing: normal; color: rgb(0, 0, 0); word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<span style="line-height: normal; widows: 2; text-transform: none; text-indent: 0px; display: inline !important; white-space: normal; orphans: 2; float: none; letter-spacing: normal; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">3)
Is it than possible to use these attribute (information) in my loginhandler?<span class="Apple-converted-space"> </span></span><br style="widows: 2; text-transform: none; background-color: rgb(255, 255, 255); text-indent: 0px; font: normal normal normal 13px/normal verdana, geneva, helvetica, arial, sans-serif; white-space: normal; orphans: 2; letter-spacing: normal; color: rgb(0, 0, 0); word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<br style="widows: 2; text-transform: none; background-color: rgb(255, 255, 255); text-indent: 0px; font: normal normal normal 13px/normal verdana, geneva, helvetica, arial, sans-serif; white-space: normal; orphans: 2; letter-spacing: normal; color: rgb(0, 0, 0); word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
</span></span></span>
</body>
</html>