Getting the requesting SP's entityID during multi-factor script execution

Jim Fox fox at washington.edu
Thu Jun 1 11:49:07 EDT 2017


>> The problem is that when the attribute script runs to populate values for the
>> MFA script, the requesting SP seems to be unavailable. I tested this by
>> logging the value of resolutionContext.getAttributeRecipientID(), and it's
>> null. Of course, when the script runs later doing the normal attribute
>> resolution work, the entityID of the SP is available.
>
> If you want it populated, you just have to set it. Just call setAttributeRecipientID before you invoke the resolver.
>
> The relying party name is in the RelyingPartyContext "child" via getRelyingPartyId()
>

In an MFA script you can use this

  rpid = input.getSubcontext("net.shibboleth.idp.profile.context.RelyingPartyContext").relyingPartyId;

Jim


More information about the users mailing list