<div dir="ltr"><div>Thanks!<br><br></div>Is there any way do this in IDP v2?<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Mar 17, 2015 at 11:46 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 3/17/15, 12:05 PM, "cneberg" <<a href="mailto:cneberg@gmail.com">cneberg@gmail.com</a>> wrote:<br>
<br>
>My Shib authentication plugin authenticates the user using an existing session from a different system and I'd like to carry forward the original authentication time into Shibboleth and if possible enforce the max session lifetime using that older time, and also use that older time as the auth-instant in assertions.<br>
><br>
>Is there a method for this in Shibboleth 3?<br>
<br>
</span>Yes. There's really no documentation on actually building custom flows, you'd have to look at the existing ones. With a fully custom flow, you're the one creating an AuthenticationResult object, and that includes the time.<br>
<br>
If you're using the External flow to plug in, then it's documented in the wiki, and the timestamp is one of the data elements you can pass back.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br></div>