Attribute Transferring

[Peter Schober]

* DominicChen <dominic.chen at morningstar.com> [2013-04-24 08:48]:
> I have defined a Principal Name attribute in attribute-resolver.xml
> and add some changes in attribute-filter.xml[IdP] and
> attribute-map.xml[SP]. I can see I set attributes has already been
> in session scope using URL: .
[...]
> Attributes
> UserEmail: 1 value(s)
> priAutMet: 1 value(s)

I don't understand your question then. Seems you have everything
working?

> Taking example of UserEmail attribute, I want this attribute to
> transfer to tomcat server behind Apache-Httpd. When program running
> in Tomcat gets user's email, it could distinguishs the what
> permission should be granted to.

Is that another qustion altogether or are we still talking about the
ExternalAuthn login handler? How attributes are accessed at the SP is
fully independent of how they came into the IdP.
Anyway: Here's the documentation for making attributes available to
Java servlet containers, including Tomcat:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPJavaInstall
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess
-peter