Follow-up on question that I recently asked on the users list about name ID support in Shibboleth IdP

[Chad La Joie]

Thanks Alex,

Can you explain how you'd imagine this to work?  In particular, where
would you expect the data necessary to create/remember the link to be
stored?

On 1/12/12 6:59 AM, WULMS Alexander wrote:
> Hi,
> 
>  
> 
> Regarding my earlier request on the users list about NameID management
> in Shibboleth IdP 3.x:
> 
>  
> 
> We manage two different environments, each having its own user database.
> In one environment, users have to authenticate based on a PKI setup,
> with a certificate. In the other environment, users have to authenticate
> with a username/password. Some people have an account in both
> environments. In order to make life easier for them, we want to set-up
> SAML based SSO between the two environments. In order for this to work,
> the users with an account in both environments must be able to link the
> two accounts. If possible, we would prefer to link the accounts using
> the SAML Name Identifier Mapping protocol. Furthermore, we would also
> like to give the users the possibility to unlink the accounts again,
> preferably using the SAML Name Identifier Management Protocol.
> 
>  
> 
> I hope this clarifies our use case for support of the NameID management
> related protocols.
> 
>  
> 
> Thanks and kind regards,
> 
> Alex
> 
>  
> 
>  
> 
> Alex Wulms
> Lead Developer, Swift.com development
> Tel: + 32 2 655 3931
> 
> S.W.I.F.T. SCRL
> 
> This e-mail and any attachments thereto may contain information which is
> confidential and/or proprietary and intended for the sole use of the
> recipient(s) named above. If you have received this e-mail in error,
> please immediately notify the sender and delete the mail.  Thank you for
> your co-operation.  SWIFT reserves the right to retain e-mail messages
> on its systems and, under circumstances permitted by applicable law, to
> monitor and intercept e-mail messages to and from its systems. 
>  
> 
> Please visit http://www.swift.com <http://www.swift.com/> for more
> information about SWIFT.
> 
>  
> 
> 
> 
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net