Shibboleth Developers

[Adam Lantos <>]

Hi,

I've one quick question on idp session handling:

AbstractSAML2ProfileHandler.populateUserInformation() tries to look up
session by nameid value. This fails with most nameids because the idp
session is not indexed by nameid. Then the code resolves principal
name via principal connectors and retrieves session by principal name.
Wasn't it cleaner to have index on the session for every nameid (this
of course would need unique nameids)? Then the principal connector
-stuff would be completely unnecessary, right? Or I'm just overlooking
something here...


thanks,
 Adam