integrating service with existing identity provider?

[Leif Johansson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/13/2012 01:45 AM, Brendan Miller wrote:
> So, what I'm having a hard time understanding is how
> authentication information is communicated to node. Node is its own
> web server. It doesn't live within apache or any other server,
> though it can exist behind a proxy. I think the same is more or
> less true with tomcat.
> 
> Can shiboleth SP act as a proxy and communicate authentication 
> information via inserting custom headers or something like that? I
> get the impression that's what you guys do for IIS, but I wasn't
> clear on whether that only works with IIS or works with a generic
> web server.
> 
> I don't think node supports fastCGI.

If node can pickup custom HTTP request headers you should be find. Just
run an apache (or IIS) as a proxy in front of your node and proxy
everything except /Shibboleth.sso which is used by mod_shib2 to do its
thing.

	Cheers Leif

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEUEARECAAYFAlB6ksIACgkQ8Jx8FtbMZndsCQCXSm1H+xEqvZrLUoWB49KffG3v
tQCeIA4zYWOJN3Urz2D1S2SgWFref1g=
=W9u6
-----END PGP SIGNATURE-----