Is there any way to send 'Principal' to SP side without using Custom Dataconnector?
Peter Schober
peter.schober at univie.ac.at
Sun Dec 28 04:56:04 EST 2014
* Surinaidu Majji <pioneer.suri at gmail.com> [2014-12-23 06:13]:
> But still i am not clear how to get the Principal at SP side without
> dataconnector.
If this still is about getting attributes about the Subject from a
RESTful API: We've pointed you to the existing contributions (and the
contact address for all questions relating to those).
Either those are usable for your specific deployment, or they're not.
If there are not usable for you, I see 4 ways forward for you:
1. Change/extend/enhance the contributed code so that it satisfies
your requirements (assuming its license allows for that)
2. Get someone else do to 1., e.g. by paying them to do it.
3. Use different software instead of Shibboleth that satisfies all
your criteria, without having to write custom code (good luck with
finding that)
For completeness there's also:
4. Learn how to use the documented APIs to get the additional
attributes made available to your Shib IDP from your custom
ExternalAuthentication code (IIRC), without having to use a
DataConnector in your IDP.
This involves writing a "Script" type attribute definition
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition
and calling Java APIs from e.g. JavaScript code (or other JSR-223
languages, if you prepare your servlet container for them).
The APIs available are listed (and documented) on that page as well:
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverScriptAttributeDefinition#ResolverScriptAttributeDefinition-InformationAvailabletotheScript
Best regards,
-peter
More information about the users
mailing list