<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
On Apr 4, 2014, at 6:07 PM, David Langenberg <<a href="mailto:davel@uchicago.edu">davel@uchicago.edu</a>> wrote:<br>
<div><br class="Apple-interchange-newline">
<blockquote type="cite">
<div style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
values returned based on either the EntityID of the SP or the IP address of the user, but I'm not sure how that would play out with the IdPs caching of resolved attributes if the IDMS attribute's values change per authentication. That's more of a question
for one of the Devs -- Devs?</div>
</blockquote>
</div>
<div><br>
</div>
The MCB code requests the "idms" attribute to be resolved when authentication happens. It does call into the Shib attribute resolver to do that work, so any caching there applies.
<div><br>
</div>
<div>Paul</div>
<div><br>
<div apple-content-edited="true">Paul Hethmon<br>
Chief Software Architect<br>
<a href="mailto:paul.hethmon@clareitysecurity.com">paul.hethmon@clareitysecurity.com</a><br>
<br>
</div>
<br>
</div>
</body>
</html>