Is there any way to send 'Principal' to SP side without using Custom Dataconnector?

Peter Schober peter.schober at univie.ac.at
Sun Dec 28 04:56:04 EST 2014


* Surinaidu Majji <pioneer.suri at gmail.com> [2014-12-23 06:13]:
> But still i am not clear how to get the Principal at SP side without
> dataconnector.

If this still is about getting attributes about the Subject from a
RESTful API: We've pointed you to the existing contributions (and the
contact address for all questions relating to those).
Either those are usable for your specific deployment, or they're not.
If there are not usable for you, I see 4 ways forward for you:

1. Change/extend/enhance the contributed code so that it satisfies
   your requirements (assuming its license allows for that)

2. Get someone else do to 1., e.g. by paying them to do it.

3. Use different software instead of Shibboleth that satisfies all
   your criteria, without having to write custom code (good luck with
   finding that)

For completeness there's also:

4. Learn how to use the documented APIs to get the additional
   attributes made available to your Shib IDP from your custom
   ExternalAuthentication code (IIRC), without having to use a
   DataConnector in your IDP.
   This involves writing a "Script" type attribute definition
   https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition
   and calling Java APIs from e.g. JavaScript code (or other JSR-223
   languages, if you prepare your servlet container for them).
   The APIs available are listed (and documented) on that page as well:
   https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition#ResolverScriptAttributeDefinition-InformationAvailabletotheScript

Best regards,
-peter


More information about the users mailing list