he Solution: Mobile Proxy
OAuth2
Architecture
Login Flow
Redirection from Browser To App
Desktop Login Flow
AAI Attribute Query
Attribute Retrieval
Mobile Proxy Overview
Example App Overview
Availability

AAI Attribute Query
All SWITCHaai IdPs support stored persistentIDs
PersistentID stored in database with mapping to user’s attributes
Allows getting attributes for a user identified by persistentID
Attribute Query can be performed by SP without user interaction
Query can only succeed if user has accessed service at least once

How to make Attribute Queries
resolvertest binary can be used to make attribute queries
bundled with Shibboleth but slow
AttributeQuery Plugin for Shibboleth 2.5
Created by NII (GakuNin federation, JP)
Provides a handler to make fast Attribute Queries via web/Shibboleth.sso/AttributeQuery?nameID=….&entityID=….