Attributes and forwarding to Relay state

[Kantzer, Chris E]

Hello,
Is there a way that an attribute consumed from the saml assertion can be
added to the request that is forwarded to the url in the relay state?
The url in the relay state is on a different domain than the sp.

Some background:

We are creating a sp (sp.example.com) to process unsolicited idp
requests from our client.  The request will contain a saml response and
a relay state to our struts web app (fooX.bar.com).  The sp is not
authenticating the user, just validating that the saml request did come
from the client before forwarding the request to the relay state url.
The url in the relay state could be different (foo1.bar.com,
foo2.bar.com,etc) depending on the client type.  The saml assertion
contains a custom attribute called 'payload' that contains confidential
client information.  Our web application on fooX.bar.com needs that
client information to lookup the client in our db.

Are the attributes added to the session that is created by the sp?  Is
this session forwarded to the relay state url even if they are on
separate domains?

My apologies if I've missed documentation that answers this question.
Thanks.

Chris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120316/35df41a0/attachment.html