Impersonate and RemoteAccess

[Marco Naimoli]

Hello, in this case it's used to permit to choose between different
profiles of the same user: the user authenticates on an external system
using
RemoteUser and when it comes back it can have more than one local profile
(and attributes set); using impersonation I permit to choose the
right profile, resolve the local attributes and add the data coming from
the RemoteUser authentication. In this particular case the user impersonate
itself. I'm sure it's not the only way to do this, and it's not the best
way, but it's an easy way
Thank you
Marco

Il giorno gio 20 mag 2021 alle ore 14:38 Cantor, Scott <cantor.2 at osu.edu>
ha scritto:

> I can't see any way you could combine RemoteUser supplying Attributes with
> the impersonation feature. It doesn't redo authentication and the data
> there's just going to be wrong.
>
> There are probably lots of combinations of scenarios and features that
> break impersonation, it's not a panacea. It's designed for cases where the
> data comes from a directory so that looking up a different user's data is
> possible.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210520/23eb24d1/attachment.htm>