How to access Shibboleth as SP built in variables in your Application?

-
Most of the variables created by the SP are controlled by you, and correspond to mapped attributes. A few are built into the SP and can't be renamed.

Variable
Meaning
Shib-Application-ID
The applicationId property derived for the request.
Shib-Session-ID
The internal session key assigned to the session associated with the request.
Shib-Identity-Provider
The entityID of the IdP that authenticated the user associated with the request.
Shib-Authentication-Instant
The ISO timestamp provided by the IdP indicating the time of authentication.
Shib-Authentication-Method
The AuthenticationMethod or <AuthnContextClassRef> value supplied by the IdP, if any.
Shib-AuthnContext-Class
The AuthenticationMethod or <AuthnContextClassRef> value supplied by the IdP, if any.
Shib-AuthnContext-Decl

The <AuthnContextDeclRef> value supplied by the IdP, if any.

We can access all these variable as header in JAVA application.
Eg:
    request.getHeader("Shib-Identity-Provider")
   request.getHeader("Shib-Session-ID")

Reference:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess

Comments

  1. karthirevaMay 23, 2016 at 5:59 PM


    Truely a very good article on how to handle the future technology. After reading your post,thanks for taking the time to discuss this content.

    salesforce Training in Chennai

    ReplyDelete

Post a Comment

Popular posts from this blog

Streaming Spring boot logs to ELK stack

-
Image
In my previous blog , we have done ELK installation on windows 10 and we have even tried to push messages from input console to Elastic Search and finally viewed on Kibana Server. I will write a separate blog on why do we need ELK? In this blog, I’ll show you how can we push spring boot application log directly to Elastic search using Logstash which we can analyze on Kibana and If you don’t know how to install ELK on windows 10 then you can refer my previous blog and start Elastic Search and Kibana server. Prerequisite Elastic Search and Kibana running on your machine Basic knowledge of Spring boot application If you don’t want to start your application from scratch then you can download one spring boot application from my GitHub repository as well. I am assuming that the Elastic Search and Kibana server are running on your machine and you have a fair idea of how to start the Logstash server and what is Logstash conf file. So, to push spring boot logs cont...
Read more

Keyboard Shortcuts That Work in All Web Browsers

-
Tabs Ctrl+1-8 – Switch to the specified tab, counting from the left. Ctrl+9 – Switch to the last tab. Ctrl+Tab – Switch to the next tab – in other words, the tab on the right. ( Ctrl+Page Up also works, but not in Internet Explorer.) Ctrl+Shift+Tab – Switch to the previous tab – in other words, the tab on the left. ( Ctrl+Page Down also works, but not in Internet Explorer.) Ctrl+W , Ctrl+F4 – Close the current tab. Ctrl+Shift+T – Reopen the last closed tab. Ctrl+T – Open a new tab. Ctrl+N – Open a new browser window. Alt+F4 – Close the current window. (Works in all applications.) Mouse Actions for Tabs Middle Click a Tab – Close the tab. Ctrl+Left Click, Middle Click – Open a link in a background tab. Shift+Left Click – Open a link in a new browser window. Ctrl+Shift+Left Click – Open a link in a foreground tab. Navigation Alt+Left Arrow, Backspace – Back. Alt+Right Arrow, Shift+Backspace – Forward. F5 – Reload. Ctrl+F5 – Reload and...
Read more

How TOTP Works: Generating OTPs Without Internet Connection

-
Introduction Have you ever wondered how authentication apps like RSA Authenticator generate One-Time Passwords (OTPs) without requiring an internet connection? This fascinating technology is made possible through Time-Based One-Time Passwords (TOTP). In this article, we will explore the mechanics of TOTP, its security features, and why it doesn't rely on the internet at the client-side for generating OTPs. Understanding TOPT 1. TOTP in a Nutshell TOPT, or Time-Based One-Time Password, is a security feature designed to enhance the authentication process. It generates OTPs that are only valid for a short period, typically 30 seconds. TOPT uses a secret key, often shared between the server and the user's device, to generate these OTPs. The central idea is to provide a second factor of authentication, beyond just a static password, to strengthen security. 2. The RSA Authenticator App One popular example of a TOPT implementation is the RSA Authenticator app. This app is commonly use...
Read more