Better approach to do Authorization in shibboleth

[Peter Schober]

* Surinaidu Majji <pioneer.suri at gmail.com> [2014-12-04 12:36]:
> if i am correct, Like this can we get the permissions of the user, Please
> give me an example to get the permissions of the user at SP side in saml
> response.

You get whatever data you need ("the permissions of the user" in your
case) by configuring the attribute resolver as documented, which out
of the box supports RDMBSs/JDBC and LDAP.
> 
> 2)      What data source contains this attribute?
> - Here the only source is our database for every information, I can get the
> info from database by sending request with proper url.

That's still lacking any necessary technical details. What access
protocols does that "database" offer? How does the "proper url" look
like? A HTTP URL? JNDI? Something like "jdbc:oracle:thin:..."?
For everything other than LDAP or JNDI you'll either have to use
contributed code (where some exists that matches the
interfaces/protocols you have available) or write code yourself.

> Please provide me some example with xml configuration, So that i can
> easily handle my task.

The documentation is full of examples for given protocols/interfaces.
You're not saying exactly how you need to connect to the "database" of
yours, you only keep repeating boilerplate code from your
ExternalAuthn login handler.
-peter