Clarification on custom attributes

[Cantor, Scott]

On 2/22/17, 12:37 PM, "users on behalf of BPottier at andovercos.com" <users-bounces at shibboleth.net on behalf of BPottier at andovercos.com> wrote:

> I’ll see if I can find a JAAS plugin. The driver though is not open sourced

That's not unusual, but I don't think you really have a choice without taking on a lot more work.

> … say that I wanted to take the route of writing something custom, would you agree
> that writing the authentication portion would be relatively simple for anyone familiar with Java?

Probably not, but native database APIs are usually pretty complex, that's one reason JDBC exists.

> And further is the issue of attributes more trouble than it’s worth if we did take that route?

It depends how generic it is. The authentication portion is presumably limiting the queries and scope, so if you do the same thing on the attribute side than the overall work involved isn't all that different. Building a generic connector for arbitrary queries is not trivial, no, you can see what the code for it looks like.

-- Scott