> Is it possible to make available to > casified applications which method was used during authentication?
Yes. We have done this and it's not too terribly difficult. Our use case was level of assurance about the authentication credential. The ideal place to put this data would be in the Authentication#getAttributes() map, but that data is not currently exposed to CAS clients. Our workaround was to create a synthetic LOA attribute that we put in the principal attributes; these are made available to clients. Our use case is pretty specific to Virginia Tech, but you might benefit from looking at the source in any case, https://projects.iad.vt.edu:8443/svn/middleware/cas/cas-server/trunk/vt-cas-server-ext/src/main/java/edu/vt/middleware/cas/authentication/. Hope that helps, Marvin -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
