<div dir="ltr"><div>Hello All,</div><div>I got very useful information for my last query(<a href="http://shibboleth.1660669.n2.nabble.com/Better-approach-to-do-Authorization-in-shibboleth-td7609474.html">http://shibboleth.1660669.n2.nabble.com/Better-approach-to-do-Authorization-in-shibboleth-td7609474.html</a>).</div><div>Based on the suggestions given by many people i started doing changes in &quot;attribute-resolver.xml&quot; and &quot;attribute-filter.xml&quot; to get the required </div><div>attributes at SP side. I added the following Restful webservice Dataconnector and attribute-definition to the attribute-resolver.xml.</div><div><br></div><div><div>&lt;resolver:AttributeDefinition id=&quot;systemSettingData&quot; xsi:type=&quot;ad:Simple&quot; sourceAttributeID=&quot;systemSetting&quot;&gt;</div><div>   &lt;resolver:Dependency ref=&quot;gws&quot; /&gt;</div><div>   &lt;resolver:AttributeEncoder xsi:type=&quot;enc:SAML1String&quot; name=&quot;urn:mace:dir:attribute-def:systemSettingData&quot; /&gt;</div><div>   &lt;resolver:AttributeEncoder xsi:type=&quot;enc:SAML2String&quot; name=&quot;urn:oid:2.5.4.43&quot; friendlyName=&quot;systemSettingData&quot; /&gt;</div><div>   &lt;/resolver:AttributeDefinition&gt;</div><div>   </div><div> &lt;resolver:DataConnector xsi:type=&quot;WebService&quot; id=&quot;gws&quot; xmlns=&quot;urn:mace:washington.edu:idp:resolver:dc&quot;</div><div>           authenticationType=&quot;NONE&quot;</div><div>           baseURL=&quot;http://ipaddress:port/url&quot;</div><div>           maxConnections=&quot;5&quot;</div><div>           maxResultSize=&quot;100&quot;</div><div>           mergeResults=&quot;true&quot;</div><div>           cacheResults=&quot;false&quot;</div><div>           username=&quot;user&quot;</div><div>           password=&quot;pass&quot;&gt;</div><div><br></div><div>        &lt;QueryTemplate&gt; </div><div>            &lt;![CDATA[ group_sws/v1/search?member=${requestContext.principalName}&amp;type=effective]]&gt;</div><div>        &lt;/QueryTemplate&gt;</div><div><br></div><div>       &lt;!--  &lt;uwdc:TrustCredential xsi:type=&quot;X509Filesystem&quot; xmlns=&quot;urn:mace:shibboleth:2.0:security&quot; id=&quot;UWCACredential&quot;&gt;</div><div>            &lt;Certificate&gt;/data/local/idp/credentials/uwca.crt&lt;/Certificate&gt;</div><div>        &lt;/uwdc:TrustCredential&gt; --&gt;</div><div>      &lt;!--   &lt;uwdc:AuthenticationCredential xsi:type=&quot;X509Filesystem&quot; xmlns=&quot;urn:mace:shibboleth:2.0:security&quot; id=&quot;Urizen3Credential&quot;&gt;</div><div>           &lt;PrivateKey&gt;/data/local/idp/credentials/<a href="http://urizen3.ck">urizen3.ck</a>&lt;/PrivateKey&gt;</div><div>           &lt;Certificate&gt;/data/local/idp/credentials/<a href="http://urizen3.ck">urizen3.ck</a>&lt;/Certificate&gt;</div><div>        &lt;/uwdc:AuthenticationCredential&gt; --&gt;</div><div><br></div><div>        &lt;Attribute name=&quot;systemSetting&quot; xPath=&quot;maxDiskSize&quot; /&gt;</div><div>    &lt;/resolver:DataConnector&gt;</div></div><div><br></div><div>I have added the required attribute-filter policy in the attribute-filter.xml. We also have &#39;principal&#39; attribute-definition in attribute-resolver.xml along with the above connector. Earlier we used to get principal(attributes) at SP side which have been set at the LoginHandler.Principal_Key(AuthenticationEngine).</div><div>After adding the additional above restful dataconector, i am even not getting the previous attribute(principal) at SP side. I know  my restful dataconnector is not the exact one but i could not able to figure out what is the reason for not getting the &#39;principal&#39; also?</div><div><br></div><div><br></div><div><br></div><div>Thanks in advance.  </div></div>