integrating service with existing identity provider?

[Brandon Montgomery]

It will definitely be easier and more functional if you use the Shib SP software instead. We are using a midel similar to what you described on IIS and it works well and we didn't have to handroll all the SAML endpoints and XML serialization and everything - it's a lot. So I can't speak to the specific implementation within the technologies you described, but you can and should definitely use Shib SP rather than rolling your own.

Brandon Montgomery

On Oct 12, 2012, at 6:54 PM, Brendan Miller <catphive at catphive.net> wrote:

> We have a web app that needs to support SAML, and needs to integrate
> with identity providers at various companies.
> 
> Originally, I assumed we'd need to use openSAML SSO to turn our web
> app into a SAML service provider. However, I note that Shiboleth
> provides a "service provider" application. I'm wondering what the
> better approach is?
> 
> Also, if Shiboleth's service provider communicates with our identity
> provider and establishes a users identity, how does it communicate
> that to our web app?
> 
> For context:
> 
> We have two web apps, one written in node js (javascript) the other
> written in Java on Tomcat. Both need to support SSO.
> 
> Also, we are going to use either nginx or lighttpd as a proxy in front
> of our service.
> 
> Thanks,
> Brendan Miller
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net