IDP extension (JAVA) - get user attributes

[Cantor, Scott]

> Is it possible to make a plugin in JAVA to get the user's attributes when a
> login happens (assume the login is successful)? I study the api and source
> code and find out that the attributes could be possibly retrieved from the
> saml response or request context, but is there any api that can be used to
> retrieve the saml response or request context without changing the source
> code?

You're mixing IdP and SP sorts of terminology, so you're going to have to be much clearer about what it is you want here, I really don't have any idea what you're asking.

Are you talking about trying to use SAML in front of the IdP (proxying, in other words) and having the IdP derive attributes to send on based on what's in another SAML assertion? There's no code in our IdP to do that, it would mean scripting, an extension, and/or specifics that depend on the SAML SP used.

-- Scott