Shibboleth Developers

[Adam Lantos <>]

Chad, Dharam,

I'm also in the middle of some experimental work with slo.
The first part was pretty straightforward, I can get the list of SPs
user is logged into from the idp session. But I cannot easily access
to the nameid. Right now I'm hackig it around and have the
attributeresolver to resolve nameid for the principal and the given
SP. But the code is really disgusting, and pretty much inefficient as
attribute resolver resolves all attributes and I've found no other way
to circumvent the resolver.

I'd love to see the NameID in the idp session (more specifically
inside the ServiceInformation objects). I've quickly ran through the
authentication/profile code, and found out that the ServiceInformation
is populated by the AuthnManager right before the NameId is computed
by the Profile Handler. So there's no easy way I can see to add NameID
to that.

I believe the NameID should belong to the Session/ServiceInformation.
What do you think?


thanks,
 Adam


On Sun, Jul 12, 2009 at 4:56 PM, Chad La 
Joie<>
 wrote:
> All of that information is stored in the Session (which relying parties a
> user has longed in to, when, which authentication method was used, etc).
>
> Dharam Veer wrote:
>>
>> Hi,
>> I need to support the SLO (even though it has many usability issues as
>> described in Shibboleth wiki). Have been going through the code and not
>> able
>> to figure out certain things.
>>
>> - IDP is supposed to send the logout request to all the participants who
>> have authenticated
>>
>> From code perspective if you could point out the method (or a way) using
>> which I could see all the participants (service providers) who have
>> authenitcated ?
>>
>> Regards & thanks
>>
>
> --
> SWITCH
> Serving Swiss Universities
> --------------------------
> Chad La Joie, Software Engineer, Net Services
> Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
> phone +41 44 268 15 75, fax +41 44 268 15 68
> ,
>  http://www.switch.ch
>
>