1. User is authenticated by custom auth handler
2. AttributeRepository then takes the username and queries LDAP/MySQL
   etc to get the attributes and associate them to that user for
   /samlValidate requests to retrieve

That's correct.

If that is the case, do you know if it's possible for the
AttributeRepository to use the username to query an Integra server
instead of LDAP/MySQL?

Should be possible, but may require a custom component depending on what interface Integra presents for querying user details. If it exposes an RDBMS interface, you can leverage a JDBC driver with JdbcPersonAttributeDaoImpl [1]. If it has a custom interface, you'll have to develop a custom implementation of IPersonAttributeDao [2] and wire it up to the AttributeRepository bean.

M

[1] https://wiki.jasig.org/display/UPC/JdbcPersonAttributeDaoImpl
[2] https://wiki.jasig.org/display/UPC/IPersonAttributeDao

--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to