<div dir="ltr">Hi Team, <div><br></div><div>We  worked on developing the authentication of users of web application using Shibboleth IdP login page. </div><div><br></div><div>Now our Customer requirement was to extend this authentication mechanism to the Mobile Users using Shibboleth IdP login page.</div><div><br></div><div>Our requirement list as below, </div><div><br></div><div>1) Users of Mobile Application needs to be authenticated using Native Application web view by loading the Shibboleth IdP login page (ios, Android, ODS runtime). </div><div>2) Users of Mobile Application should be authenticated via web view only once, and next the same user should be authenticated only after six months.</div><div><br></div><div>Please validate the following design decisions for the above said requirement,</div><div><br></div><div>1)  Designing the user authentication via Shibboleth IdP login page loaded on to the native application web view and the  subsequent authentication should be via Shibboleth ECP End point using the Shibboleth IdP Session cookie stored on the browser , and here the default browser of the native application used by the web view.  Is this valid ?  If not valid what is the alternative to achieve this?</div><div><br></div><div>2)  Designing the shibboleth session time out configuration as below,<br></div><div><div class="gmail-line gmail-number2 gmail-index1 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-bash gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:0px 50%;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">idp.session.timeout=PT4320H</code></div><div class="gmail-line gmail-number5 gmail-index4 gmail-alt2" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-bash gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:0px 50%;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">idp.authn.defaultLifetime=PT4320H</code><code class="gmail-bash gmail-spaces" style="background:0px 50%;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit"> </code> </div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-bash gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:0px 50%;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">idp.authn.defaultTimeout=PT259200M</code></div></div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-bash gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:0px 50%;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">Kindly validate the configuration if shibboleth is not supporting the same, </code><code class="gmail-bash gmail-plain" style="background:0px 50%;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">what is the alternative to achieve force </code><span style="background-color:initial;color:rgb(0,0,0)">authentication of user once in six months for mobile applicaiton?</span></div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><span style="background-color:initial;color:rgb(0,0,0)">3) Can the user authenticated via Shibboleth login page be logged out via Shibboleth logout ECP end point with the Shibboleth IdP Session cookie?</span></div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><span style="background-color:initial;color:rgb(0,0,0)">4) Can the same instance of Shibboleth Server configured with different IdP Session time out configuration one for web and other one for mobile? Kindly confirm , if not possible what is the alternative?i?</span></div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><span style="background-color:initial;color:rgb(0,0,0)">Thanks, </span></div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><span style="background-color:initial;color:rgb(0,0,0)">Ashok Vijayakumar.</span></div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><br></div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-bash gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:0px 50%;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)"><br></code></div><div class="gmail-line gmail-number8 gmail-index7 gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-bash gmail-plain" style="font-family:Consolas,"Bitstream Vera Sans Mono","Courier New",Courier,monospace;border-radius:0px;background:0px 50%;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)"><br></code></div><div><br></div><div><br></div></div>