Custon data connector to create attributes from http headers or Apache env variables

[Cantor, Scott]

On 4/18/13 12:26 PM, "Wessel, Keith William" <kwessel at illinois.edu> wrote:

>Has anyone created a custom data connector that could bring in attributes
>from the environment or http headers?

I haven't seen one, but I believe it can also be done via scriptlet
depending on the requirements.

>Can anyone point out any obvious pitfalls that I'm overlooking here?
>There's, of course, the security factor of trusting whatever's coming
>across the wire to the IDP as official attributes, but that could be
>brought up on any number of levels.

Well, it's the same as with the SP of course. Using environment variables
rather than headers is always advisable where possible, otherwise it's
really a question of code. You need a controlled access path to the IdP
and verification that the code setting the headers is protecting against
spoofing.

-- Scott