<div><div dir="auto">This is pretty evident in the distributed example in the MFA config.</div><div dir="auto"><br></div><div dir="auto">However, here’s an example:</div><div dir="auto"><pre style="word-wrap:break-word;white-space:pre-wrap">AttributeResolutionContext resCtx = (AttributeResolutionContext) profileRequestContext.getSubcontext(AttributeResolutionContext.class, true);</pre><pre style="word-wrap:break-word;white-space:pre-wrap">Be sure to remove it later if you want the normal attribute resolution process to happen:</pre><pre style="word-wrap:break-word;white-space:pre-wrap"><pre style="word-wrap:break-word;white-space:pre-wrap">profileRequestContext.removeSubcontext(resCtx);</pre><pre style="word-wrap:break-word;white-space:pre-wrap"><br></pre><pre style="word-wrap:break-word;white-space:pre-wrap">Greg</pre></pre><pre style="word-wrap:break-word;white-space:pre-wrap"><br></pre></div><br><div class="gmail_quote"><div>On Sun, Oct 1, 2017 at 3:32 PM Samuel Bristot Loli <<a href="mailto:bristot@gmail.com">bristot@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>Hello All,</div><span class="m_1468083002764354744gmail-im"><div><br></div><div>Sorry for the doubts, I'm starting in the shib world.<br></div><div><br></div></span>I
 developed a new authentication flow that is being called as the second 
factor through mfa-config-flow. I need to get the user attributes from 
the response of the first authentication factor "Password" to use in my 
authentication flow. Reading the documentation, I came up with this 
code:<div><br></div><div>Ps.: My question is in the code comment.<br></div><div><br></div><div><span class="m_1468083002764354744gmail-im">public String TestLoginService(AuthenticationContext authenticationContext, ProfileRequestContext<?, ?> profileRequestContext) {<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        SubjectCanonicalizationContext sub = (SubjectCanonicalizationContext) profileRequestContext.getSubcontext("net.shibboleth.idp.authn.context.SubjectCanonicalizationContext"); <br>        AttributeResolutionContext att = (AttributeResolutionContext) authenticationContext.getSubcontext("net.shibboleth.idp.attribute.resolver.context.AttributeResolutionContext", true);<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        att.setPrincipal(sub.getPrincipalName());<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        att.getRequestedIdPAttributeNames().add("mail");<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        att.getRequestedIdPAttributeNames().add("eduPersonPrincipalName");<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        att.getRequestedIdPAttributeNames().add("uid");<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        att.resolveAttributes(?)<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px"></span>   
     //I don't now how to get an AttributeResolver objects to call the 
method att.resolveAttributes, which expects an AttributeResolver as 
parameter. <span class="m_1468083002764354744gmail-im"><br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        IdPAttribute emailAttr = att.getResolvedIdPAttributes().get("mail");<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        IdPAttribute uid = att.getResolvedIdPAttributes().get("uid");<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">        IdPAttribute eppn = att.getResolvedIdPAttributes().get("eduPersonPrincipalName");<br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px">    }    <br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px"><br style="font-family:Nylas-Pro,Helvetica,"Lucidia Grande",sans-serif;font-size:14.5px"></span>Thanks!</div></div>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div></div>