CAS serviceValidate cannot return attributes

[Cantor, Scott]

On 5/5/22, 8:36 AM, "users on behalf of YF Lai" <users-bounces at shibboleth.net on behalf of ccyflai at ust.hk> wrote:

> It found that the CAS serviceValidate endpoint cannot return attributes that was previously resolved using
> SubjectDataConnector or SubjectDerivedAttribute in the authentication flow.   I find no option to preserve the
> SubjectContext so that it can be reused to resolve attributes in CAS serviceValidate.   Is there any way to do it?

No, the Subject is a front-channel construct, it's not accessible on a back-channel.

-- Scott