resolving attribute based on ACS URL

[Cantor, Scott]

On 3/31/17, 2:01 PM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:

> Is it possible to use the ACS URL provided in the SAML authn request as a 
> condition in attribute resolution?

It's not really how SAML is meant to work, but you can use anything you want as long as it exists.

The response location is in the outbound message context tree (profileRequestContext.getOutboundMessageContext()) and from there you have to navigate outbound context -> SAMLPeerEntityContext -> SAMLEndpointContext.

That's getting fairly deep into the internals and I can't swear that it would never change. I think if we felt there were things people needed to be able to pull out, we'd want to provide wrapper functions to get them.

-- Scott