SP: updating attributes

[Yuji Shinozaki]

Hi,

We are using the Native SP via mod_shib and have a need to make sure that the shibboleth attributes are updated with each visit to certain urls.  It seems that with the native sp the only way to update the attributes is via an authentication.  So one way it seems that we can accomplish what we want is to reduce the <Session> lifetime to something very short, but that reduces the session lifetime for all of the shibboleth applications to which that <Session> applies.

It would be preferable to able to say something to the effect of "re-validate the session when you go to these particular urls" or preferably "update the shib attributes when you go to these particular urls".

(I thought forceAuth was the answer, but we don't want to force re-authentication on the IDP, we just want to re-authenticate in the SP).

Is there a better way to accomplish the behavior we would like?

yuji
----
Yuji Shinozaki
Technical Director, SHANTI
University of Virginia
http://shanti.virginia.edu
434-924-7171
ys2n at virginia.edu
----
"Computers are useless.  They only give you answers". --Pablo Picasso