Add Attribute to SAML Response

[Zmuda, Matthew R]

I have been playing around with adding attributes to SAML Response from my IDP.
Just for testing purposes I have added 2 attributes with static values (this works fine):

resolver-attribute.xml:

      <resolver:AttributeDefinition xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" id="workspaceId">
           <resolver:Dependency ref="staticAttributes" />

           <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
                                name="workspaceId" />

      </resolver:AttributeDefinition>

      <resolver:AttributeDefinition xsi:type="Simple" xmlns="urn:mace:shibboleth:2.0:resolver:ad" id="lang">
           <resolver:Dependency ref="staticAttributes" />

           <resolver:AttributeEncoder xsi:type="SAML2String" xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
                                name="lang" />

      </resolver:AttributeDefinition>

      <resolver:DataConnector id="staticAttributes" xsi:type="dc:Static"
                                                     xmlns="urn:mace:shibboleth:2.0:resolver:dc">
           <Attribute id="workspaceId">
                <Value>workspace</Value>
           </Attribute>
           <Attribute id="lang">
                <Value>en</Value>
           </Attribute>
      </resolver:DataConnector>

attribute-filter.xml:

      <afp:AttributeFilterPolicy id="releasePrincipal">
            <afp:PolicyRequirementRule xsi:type="basic:ANY"/>

            <afp:AttributeRule attributeID="workspaceId">
                  <afp:PermitValueRule xsi:type="basic:ANY"/>
            </afp:AttributeRule>

            <afp:AttributeRule attributeID="lang">
                  <afp:PermitValueRule xsi:type="basic:ANY"/>
            </afp:AttributeRule>

      </afp:AttributeFilterPolicy>



What I am wondering is how I can pass a value into this? That is, I have 5 attributes I want to pass with values can change and I need my web app to be able to dynamically set the values to pass via SAML Response. I see options for database connectivity but that is not what I need. The values I need to set would live in my web application.

Thanks,

NOTICE: Confidential message which may be privileged. Unauthorized use/disclosure prohibited. If received in error, please go to www.td.com/legal for instructions.
AVIS : Message confidentiel dont le contenu peut être privilégié. Utilisation/divulgation interdites sans permission. Si reçu par erreur, prière d'aller au www.td.com/francais/avis_juridique pour des instructions.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130122/717485d4/attachment-0001.html