<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>Todd,</div>
<div><br>
</div>
<div>What I've done for this is to create a custom principal and data resolver. So the login module stores the attributes as name/value pairs in the custom principal. The data resolver looks for principals of that type. If it finds that type, then it extracts
the attributes and makes them available to the Shib engine.</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><Dergenski>, "Todd A." <<a href="mailto:TDergens@odu.edu">TDergens@odu.edu</a>><br>
<span style="font-weight:bold">Reply-To: </span>Shibboleth Dev <<a href="mailto:dev@shibboleth.net">dev@shibboleth.net</a>><br>
<span style="font-weight:bold">Date: </span>Monday, August 6, 2012 11:06 AM<br>
<span style="font-weight:bold">To: </span>Shibboleth Dev <<a href="mailto:dev@shibboleth.net">dev@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>Passing information from Authentication Module to Resolvers<br>
</div>
<div><br>
</div>
<div>
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Hello All:</div>
<div> I am in the processes of updating our custom login module and I was wondering if there was any way to pass a variable from the authentication module to the resolvers? Something along the lines of user selects ‘Accept’ on our login screen and then
that value is stored like requestContext.getPrincipalName so the resolvers can pull one attribute over another. I’ve taken a look at (<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition"><font color="blue"><u>https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition</u></font></a>)
and see several interfaces defined, but I don’t see anything that would grant access to the session cookies or any other store.</div>
<div> </div>
<div><font face="Consolas" size="2" color="#1F497D"><span style="font-size:10.5pt;">Todd Dergenski</span></font></div>
<div><font face="Consolas" size="2" color="#1F497D"><span style="font-size:10.5pt;">Old Dominion University</span></font></div>
<div><font face="Consolas" size="2" color="#1F497D"><span style="font-size:10.5pt;">Senior Security Administrator</span></font></div>
<div><font face="Consolas" size="2" color="#1F497D"><span style="font-size:10.5pt;">4700 Elkhorn Ave - Room 4300</span></font></div>
<div><font face="Consolas" size="2" color="#1F497D"><span style="font-size:10.5pt;">Norfolk, Va, 23529 USA</span></font></div>
<div><font face="Consolas" size="2" color="#1F497D"><span style="font-size:10.5pt;"> </span></font></div>
<div><font face="Consolas" size="2" color="#1F497D"><span style="font-size:10.5pt;">(757) 683-4301</span></font></div>
<div><a href="mailto:tdergens@odu.edu"><font face="Consolas" size="2" color="blue"><span style="font-size:10.5pt;"><u>tdergens@odu.edu</u></span></font></a></div>
<div> </div>
<div> </div>
<div> </div>
</span></font></div>
</div>
</span>
</body>
</html>