authenticated username in accessError.html

[Chris Franks]

Hi,

I'm creating custom error pages (for sessionError and accessError) on our SPs and would like to know if there's any way that the userid (or REMOTE_USER as defined in the application defaults) can be passed through using a shibmlp tag?  Or would redirection to a protected (valid-user) resource on the same SP be an advised way of achieving this?

Just "<username> does not have access..." reads better and would be easier to analyse than "you do not have access" (especially where users may have already authenticated with role/secondary accounts).

Thanks for any advice,

Chris