c# verify session

[Grunge]

okay, i can see the Variable _SERVER["Shib_Authentication_Instant"] on 
the Server, so i can implement that on the php side.

But when the Windows Software, needs to make sure the request, to reset 
a password, comes from a valid authenticated teacher/user, it needs to 
check with a IdP or a SP if the Shib_Session_ID is valid.
How can i do this?


On 28.11.2013 16:31, Peter Schober wrote:
> * Grunge <grungebaer at gmail.com> [2013-11-28 16:25]:
>> So the Password will be resetted by a c# Services that runs on Windows.
>> How can this Service check if a passed Shib_Session_ID is valid and not
>> older than 2minutes?
> I think you want Shib-Authentication-Instant (not Shib_Session_ID)
> which alredy is a ISO8601 datetime string. But that's part of the
> subject's session (it comes from the IdP in a SAML assertion) so not
> accessible by anyone/anything else by default.
> -peter
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net