Accessing relying party entity ID in an attribute resolver definition

Wessel, Keith kwessel at illinois.edu
Fri Feb 10 12:08:08 EST 2017


Thanks, Scott. I figured it was that easy and just missed that part of the scripted attribute definition docs. Sorry to make you restate something already documented.

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, February 10, 2017 10:36 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Accessing relying party entity ID in an attribute resolver definition

On 2/10/17, 11:30 AM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> The group part is easy. Question is: is the RelyingPartyContext available inside a scripted attribute definition's script so
> that I can access and compare the requesting SP's entityID? If so, how would I get the entityID?

https://wiki.shibboleth.net/confluence/display/IDP30/ScriptedAttributeDefinition

Data Available to Script

A variable named resolutionContext containing the AttributeResolutionContext for the current resolution request.

It's just "resolutionContext.getAttributeRecipientID()"

That's a special case since attribute resolution is a specific use case, you don't have to get the information all the way from the root of the tree.

-- Scott


-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list