Accessing relying party entity ID in an attribute resolver definition

[Wessel, Keith]

Hi, all,

I've got a specific AWS account and role that needs 2FA enabled. I thought I'd just add some code to my attribute definition that the MFA piece uses to force our Duo method if the user is in the corresponding group for the AWS role and if the requesting SP is Amazon.

The group part is easy. Question is: is the RelyingPartyContext available inside a scripted attribute definition's script so that I can access and compare the requesting SP's entityID? If so, how would I get the entityID?

I'm hoping it's a matter of getting the entityID in a similar manner to the code in the login Belocity template, using the profile request context.

Eventually, I plan to do something more scalable using a series of Grouper-managed groups, but I wanted to start with this one use case manually.

Thanks,
Keith