<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>There are 2 places I know of that can give a list of SP required/requested attributes:</div>
<div><br>
</div>
<div>1. The SP metadata itself can list them. However, that does not mean the SP will get them.</div>
<div>2. The Shibboleth configuration of attributes (attribute-resolver.xml and attribute-filter.xml). This controls what is released.</div>
<div><br>
</div>
<div>You don't have access to #2 unless you are going to parse out all of that configuration yourself. You would have access to #1.</div>
<div><br>
</div>
<div>You would need to create a custom attribute resolver to store those attributes the user provides until Shib calls it post-authentication. In doing this I also created my own Principal class that has the data storage for my attributes. My resolver checks
the class type and does the right thing.</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Dierick Bart <<a href="mailto:bart.dierick@hotmail.com">bart.dierick@hotmail.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>Shibboleth Dev <<a href="mailto:dev@shibboleth.net">dev@shibboleth.net</a>><br>
<span style="font-weight:bold">Date: </span>Wed, 21 Mar 2012 17:18:04 +0100<br>
<span style="font-weight:bold">To: </span>Shibboleth Dev <<a href="mailto:dev@shibboleth.net">dev@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: How to retrieve SP required attributes at the IDP before authentication (Paul Hethmon)<br>
</div>
<div><br>
</div>
<div>
<div dir="ltr">
<div dir="ltr">
<div style="FONT-FAMILY: 'Calibri'; COLOR: #000000; FONT-SIZE: 12pt">
<div>No; in my loginhandler I just need to know wich attributes the Service Provider needs. What I'm going to do is:
</div>
<div> </div>
<div>1) the Service Provider forwards to the IDP </div>
<div>2) the IDP chooses my loginhandler </div>
<div>3) my loginhandler creates and shows a servlet. That servlet ask for authentication AND it shows which attributes the Service Provider needs. So the loginhandler got to know the required attributes.
</div>
<div>4) the user authenticates AND provides the required attributes as viewed in the servlet</div>
<div>5) the authentication is completed, the attributes are PUSHED to the Service Provider.
</div>
<div> </div>
<div> </div>
<div>So the loginhandler needs the info about the required attributes so that the user can provide these attributes.
</div>
<div> </div>
<div>So you suggest and says that this (is only) possible with the metadata of the SP?
</div>
<div> </div>
<div>Greetings</div>
</div>
</div>
</div>
</div>
-- To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">
dev-unsubscribe@shibboleth.net</a></span>
</body>
</html>