Add Attribute to SAML Response

[Zmuda, Matthew R]

Hmm I am thinking writing a custom DataConnector might be the way to go.
Something that has access to HttpSession would be ideal.

Matt Zmuda | IT Solutions Developer
DCTS Online Channels - Authentication and Security - CIP/ESR


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, January 23, 2013 10:10 AM
To: Shib Users
Subject: Re: Add Attribute to SAML Response

On 1/23/13 10:01 AM, "Zmuda, Matthew R" <Matthew.R.Zmuda at td.com> wrote:

>So I see what is available to me but I don't think these classes are 
>intended to be used to pass data from web app to attribute unless I am 
>missing something.

I think it's pretty questionable to run anything else inside the IdP's context, so in that sense, no, it's not intended.

There's also the query problem. If you're not SAML 2 only, you can't expect to do all attribute lookup solely while the user's present, which means you can't store the data you want into the servlet container session as an attribute.

If that's not a concern, then you can access the servlet request object via one of the APIs and then yes, you can do it.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

NOTICE: Confidential message which may be privileged. Unauthorized use/disclosure prohibited. If received in error, please go to www.td.com/legal for instructions.
AVIS : Message confidentiel dont le contenu peut être privilégié. Utilisation/divulgation interdites sans permission. Si reçu par erreur, prière d'aller au www.td.com/francais/avis_juridique pour des instructions.