Authorization using shibboleth sso

[Peter Schober]

* Surinaidu Majji <pioneer.suri at gmail.com> [2014-12-01 12:14]:
> -> So here we are getting the permissions from our server and send it to
> the idp by AuthenticationEngine.returnToAuthenticationEngine(req,resp); by
> setting the permissions in the request as an attribute.

OK, I'm beginning to see what you keep going on about the external
authentication login handler, that's where you're intending to perform
authorization?  If that's so, don't do that, this is meant to
exernalize /authentication/ from the IDP. Authorization should be
handled at the SP, based on attributes released by the IDP.
The indended way to get the needed information into the IDP is via the
attribute resolver (and release it in the filter), not from the
login handler. Same as for any other attribute.
-peter