Better approach to do Authorization in shibboleth

[Andrew Morgan]

On Fri, 5 Dec 2014, Surinaidu Majji wrote:

> Hello @Andrew Morgan, Thanks a lot for your support.Definitely i will ask
> questions to get clarification.
> Once an authentication is done, i will get the necessary attributes from
> SAMLResponse through attribute-resolver,attribute-filter.xml. So i can get
> my necessary user permissions by querying our database through Data
> Connector.
>
> But my doubt is how could i get the Principal(includes email, acctype)
> without querying  database, I think this is because of that we are sending
> req.setAttribute(LoginHandler.Principal_Key, login.getAttributes()); to
> AuthenticationEngine.returnToAuthenticationengine(req,resp);
>
> By sending the  login.getAttributes() as principal to the
> AuthenticationEngine, we are able to get those in response by giving
> defining the 'xsi:type="PrincipalName' id="principal" in the
> attribute-resolver.xml.
>
> am i correct? Please let me know if i am wrong?

I don't know how id="principal" works if you don't have a Data Connector 
defined.  From your other emails, it sounds like you aren't querying a 
database.  Either way, you'll need to get an appropriate Data Connector 
defined in attribute-resolver.xml and use that to retrieve attributes.

 	Andy