shib-cas plugin authentication attributes

[Cantor, Scott]

On 7/6/22, 9:08 PM, "users on behalf of Baron Fujimoto" <users-bounces at shibboleth.net on behalf of baron at hawaii.edu> wrote:

>    Thanks for the pointers. Are there any examples in the IdP docs of scripting to access request variables, or
> perhaps even asserting AuthnContextClassRef based on request variables?

Accessing request information via a script is handled by injecting shibboleth.HttpServletRequest as a customObject-ref into the scripted definition(s). That gives you anything available on the HttpServletRequest interface.

Controlling the type of authentication from an external login method is handled by setting the right Java request attribute when the external authn method finishes work [1] and passes control back to the IdP so either the CAS plugin can do that or it has to be modified to do so. 

-- Scott

[1] https://wiki.shibboleth.net/confluence/display/IDP4/ExternalAuthnConfiguration