Custom Principal & Authentication Data Passing

[cneberg]

In shibboleth 2 I created a custom principal class which contained a map of
attributes where I could carry information about the authentication to
scripted attributes in the attribute resolver.

I retrieved it in a scripted Attribute in the attribute resolver.xml like
this.

subject = requestContext.getUserSession().getSubject();
principals = subject.getPrincipals(CustomAuthPrincipal("").getClass());
val = principal.get("mycustom attribute");

How do I pass custom data in shibboleth 3?

I'm trying to follow the docs but I'm having some trouble.

https://wiki.shibboleth.net/confluence/display/IDP30/ScriptedAttributeDefinition

getUserSession is no longer avaiable.

I've tried these methods instead to get to the subject but they all return
null.

resolutionContext.getSubcontext("net.shibboleth.idp.authn.context.AuthenticationContext");
resolutionContext.getSubcontext("net.shibboleth.idp.authn.context.SubjectCanonicalizationContext")
resolutionContext.getSubcontext("net.shibboleth.idp.authn.context.ExternalAuthenticationContext");

How do I get the custom principal or is there a better method of passing
info about the authentication?

-Topher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150603/98bcae22/attachment.html>