Set Auth-Instant in Shibboleth Authentication plugins

[cneberg]

Thanks!

Is there any way do this in IDP v2?

On Tue, Mar 17, 2015 at 11:46 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 3/17/15, 12:05 PM, "cneberg" <cneberg at gmail.com> wrote:
>
> >My Shib authentication plugin authenticates the user using an existing
> session from a different system and I'd like to carry forward the original
> authentication time into Shibboleth and if possible enforce the max session
> lifetime using that older time, and also use that older time as the
> auth-instant in assertions.
> >
> >Is there a method for this in Shibboleth 3?
>
> Yes. There's really no documentation on actually building custom flows,
> you'd have to look at the existing ones. With a fully custom flow, you're
> the one creating an AuthenticationResult object, and that includes the time.
>
> If you're using the External flow to plug in, then it's documented in the
> wiki, and the timestamp is one of the data elements you can pass back.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150318/49864f47/attachment.html