IDP extension (JAVA) - get user attributes

[Yi Yang]

.Hi Scott

In IDP, I want to get the user's attributes if the login is successful. I
make a filter to intercept the request and I am able to check if the user
is authenticated by calling the method loginContext.isUserAuthenticated().
If the user is authenticated, the request will be returned to
AuthenticationEngine then ProfileHandler (as far as I can tell from the
source code). In SSOProfileHandler, the completeAuthenticationRequest
method builds a SSORequestContext and creates a samlResponse, and the
attributes are saved in the samlResponse. I am wondering if I can retrieve
the SSORequestConext or the SamlResponse programmatically? Please correct
me if I am wrong, I am new to shibboleth.

Cheers

On Tue, Feb 2, 2016 at 10:42 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Is it possible to make a plugin in JAVA to get the user's attributes
> when a
> > login happens (assume the login is successful)? I study the api and
> source
> > code and find out that the attributes could be possibly retrieved from
> the
> > saml response or request context, but is there any api that can be used
> to
> > retrieve the saml response or request context without changing the source
> > code?
>
> You're mixing IdP and SP sorts of terminology, so you're going to have to
> be much clearer about what it is you want here, I really don't have any
> idea what you're asking.
>
> Are you talking about trying to use SAML in front of the IdP (proxying, in
> other words) and having the IdP derive attributes to send on based on
> what's in another SAML assertion? There's no code in our IdP to do that, it
> would mean scripting, an extension, and/or specifics that depend on the
> SAML SP used.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160202/258f0f3b/attachment.html>