Custom Principal & Authentication Data Passing

[Cantor, Scott]

On 6/4/15, 10:18 PM, "cneberg" <cneberg at gmail.com> wrote:


>
>The issue I'm still having is my custom principal set in my external auth 
>plugin isn't there, I think its being overwritten and I need to set the 
>shibboleth.authn.External.addDefaultPrincipals option to False

No, that wouldn't cause it. That prevents other Principals from being 
added, it doesn't have any affect on what you add. Returning a Subject 
from the External servlet will use that exact object, at least for that 
transaction. It won't serialize safely without more code added of course 
if it's trying to preserve the subject in a session, but that won't matter 
in the same request.

> - which isn't in a released version of the
> IDP yet.  Do you have a release date scheduled for 3.2?

No.

-- Scott