Shibboleth Developers

[Chad La Joie <>]

They are available throughout the SP session lifetime.  Note that the
SP never goes back to the IdP and asks for new attributes however.  So
if a value changes at the IdP your application won't see it until the
next time the user logs in.

On Thu, Oct 7, 2010 at 14:11,  
<>
 wrote:
> Hi,
>
> I'm tasked with shibbolizing a ASP.NET application. I just have a sanity 
> check
> question.
>
> I think I grasp the basic concept, and am plumping for my Application doing
> the Session handling, authenticating users by matching specified Header
> variables (provided by Shibboleth authenticated users) with our mathing DB
> values.
>
> My question is this:
>
> Once a user is authenticated by Shibboleth are the specified Header 
> variables
> sent with every subsequent HTTP request there on in? Or are the only 
> provided
> once at entry point?
>
> Thanks,
>
> Steve
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered