Session custom context

[Cantor, Scott]

On 2/22/17, 11:31 AM, "users on behalf of Marco Naimoli" <users-bounces at shibboleth.net on behalf of marco.naimoli at unipd.it> wrote:

> Hello, I'd like to make available to attribute resolution process some dynamic
> data coming from authentication phase (I'm using MFA);

Then it needs to be put into the Java Subject produced by whatever login flow is producing that data. You can access the Subject in the resolver (outside of queries at least).

> it is global, so the custom context values can be read and overwritten
> from all subsequent authenticating users.

They cannot be overwritten, certainly not safely, that's not threadsafe and it's global.

> Maybe the custom context is not intended for this kind of usage, or I'm
> using it in a wrong way; is this the correct way to solve the problem ?

No, it's not.

-- Scott