Getting access to Shib Attributes after initial authentication

[Guy Tadi]

I'm trying to shibbolize an existing application so I don't have a lot of
flexibility. Not every access to my application requires Shib
authentication. I've already gone down the path of using Lazy session but
didn't workout because of some client-side browser plugin restrictions.
The approach I'm considering now is to force sessions that require Shib
authentication to /secure as defined in RequestMapper "<Path name="secure"
When the browser hits /secure it establishes a Shib session and I can
see all the Shib session attributes. One subsequent access to the
application path (which is not in /secure) I'd like to get access to the
Shib attributes but all I see is the session cookie which is
understandable.

Given that my application now has accesss to HTTP_COOKIE that contains the
SHIB_SESSION_ID is there any way to use that SHIB_SESSION_ID to access
attribute the user used for the initial authentication? As expected the
attributes are no longer in that particular session environment since the
access is not to /secure, but the SHIB_SESSION_ID is.

I have seen references to exporting assertion and have made the necessary
configurations to export the assertions, but haven't found any good example
of how to actually access the exported assertions. My initial attempt to
get to assertion by simply browsing to exportLocation gives me "assertion
lookup request failed, missing required parameters." I'm sure I'm missing
the necessary query strings but I don't know what they should be and not
even sure if this is the best way to address my problem. Any advice on any
aspect of my post above will be very much appreciated.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150417/d8987fd3/attachment.html