How to extend Shib IdP to have a new customized DataConnector

[Nate Klingenstein]

Yaowen,

> In our product, IdP may not have access to the database  
> directly( some security reason ). We are think if it is possible to  
> extend the DataConnector or build a customized DataConnector. For  
> example instead of using JDBC to send some "select" statement, can  
> we send some SOAP message to a server to do the authentication? Is  
> that possible or easy to extend from the existing code?

Absolutely.  Please see:

https://wiki.shibboleth.net/confluence/display/SHIB2/DevelopmentDocs

and specifically:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevCustomExtension
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtDataCtr

There are also a couple of web service style data connectors that have  
already been written and contributed back to the community.  You may  
find one of those useful.

https://wiki.shibboleth.net/confluence/display/SHIB2/ 
Contributions#Contributions-IdentityProviderExtensions

If you decide to develop your own and encounter questions along the  
way, please ask on this list, and consider contributing your work back  
if you develop something new or improve one of the existing extensions.

Thanks,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120802/79d132f4/attachment.html