Capturing SAML Attributes from the IDP

Cantor, Scott cantor.2 at osu.edu
Fri May 31 14:26:19 EDT 2013


> I need to get a collection of all of these values… If not during the login
> procedure as defined previously, then at some point after the redirection
> completes.

Nate directed you at the basic documentation on it.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess

The job of the SP and its attribute extraction layer is to turn the data you seem to want to look at (SAML) into what the SP expects you want to look at (decoded, normalized, locally tailored).

If you're on IIS, the only access to the data is via request headers populated by the filter, which is described on the page.

-- Scott



More information about the users mailing list