Shibboleth Developers

["Cantor, Scott E." <>]

> When the user returns to the servlet, our local SSO sets AUTH_TYPE to
> indicate whether SGC was actually used or not (based on validation of
> our SSO cookie with our authentication service).  The servlet then needs
> to pass along this result to the AuthenticationEngine so that the result
> can be signaled back to the originating SP.

Got it, so you just have to map those to the context URIs.

I've avoided any such communication from my handler to the servlet because I 
didn't want any additional dependency on a Java session. Personally, I 
wouldn't hard code it, but you could configure it in two places so they match.

-- Scott