Add Attribute to SAML Response

[Cantor, Scott]

On 1/23/13 10:01 AM, "Zmuda, Matthew R" <Matthew.R.Zmuda at td.com> wrote:

>So I see what is available to me but I don't think these classes are
>intended to be used to pass data from web app to attribute unless I am
>missing something.

I think it's pretty questionable to run anything else inside the IdP's
context, so in that sense, no, it's not intended.

There's also the query problem. If you're not SAML 2 only, you can't
expect to do all attribute lookup solely while the user's present, which
means you can't store the data you want into the servlet container session
as an attribute.

If that's not a concern, then you can access the servlet request object
via one of the APIs and then yes, you can do it.

-- Scott