Programmatic Access to SP Attributes

[Cantor, Scott]

> Out of curiosity, would the values at
> http://<myhost>/Shibboleth.sso/Session
> be read from the cookie as well?

Nothing is read from the cookie, that's just a key to server state.

But, no, the handler is reading data directly from the session cache and doesn't have anything to do with content protection. That's why it can verify correct general operation regardless of how screwed up the content rules are.

-- Scott