Get Session Information in JIT Handler

Question

Use Case: There is a Community that the User has to login to using SSO. A custom SAML JITHandler is configured for the same to assign a PermissionSet to the User.

We now need to make this PermissionSet Session based. However we are unable to get the Session Id in the JIT handler. Tried using Auth.SessionManagement, and UserInfo.getSessionId() but both these calls error out.

Is there any other way to get the session id in the JIT Handler, or another way that we can implement the Session Based PermissionSet assignment?

Answer 1

The JIT handler executes before the user is logged in, so there's no session you can use. Instead, use a Login Flow to specify any Session Based Permissions. There's a trailhead that goes in to more details.