modify SP session variables

[chad phillips]

Hi,

I was wondering if it is possible to modify a Service Provider user's
session variable after the SAML assertion has been processed.

example, Salesforce is the IDP, Shibboleth on Apache is the SP.  The
user logs in, session variable X is set from the SAML assertion.  Can
I later modify variable X?

Here is a simple example.  The user's last name is sent via the SAML
assertion.  I now have a session variable LASTNAME = "Jones".  The
user changes their last name via some webapp.  Without having the user
to log out and back in, is there a way to change value that is in the
LASTNAME variable of the session?

I think the answer is no, but I wanted to ask.

thank you