<div dir="ltr"><div>Hi,</div><div><br></div><div>For SAML service provider there is an option to configure key (private key) and certificate as part of Credential Resolver in shibboleth2.xml.</div><div>For HSM (Hardware Security Module) based systems, private keys are being stored to different systems.</div><div>Does shibboleth support the key to be picked up from another HSM store? </div><div>If yes, then what configuration change required in shibboleth2.xml for it to pick up private key/equivalent from HSM store instead of local box ? </div><div><br></div><div>Regards,</div><div>Amit </div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Jul 30, 2019 at 9:30 PM <<a href="mailto:dev-request@shibboleth.net">dev-request@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Send dev mailing list submissions to<br>
<a href="mailto:dev@shibboleth.net" target="_blank">dev@shibboleth.net</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://shibboleth.net/mailman/listinfo/dev" rel="noreferrer" target="_blank">https://shibboleth.net/mailman/listinfo/dev</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:dev-request@shibboleth.net" target="_blank">dev-request@shibboleth.net</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:dev-owner@shibboleth.net" target="_blank">dev-owner@shibboleth.net</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of dev digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: How do I use. Some documentation is available? (Alan Buxey)<br>
2. Re: How do I use. Some documentation is available? (Alan Buxey)<br>
3. RE: How do I use. Some documentation is available?<br>
(K, Amit (MIND))<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Tue, 30 Jul 2019 10:10:07 +0100<br>
From: Alan Buxey <<a href="mailto:alan.buxey@myunidays.com" target="_blank">alan.buxey@myunidays.com</a>><br>
To: Shib Dev <<a href="mailto:dev@shibboleth.net" target="_blank">dev@shibboleth.net</a>><br>
Subject: Re: How do I use. Some documentation is available?<br>
Message-ID:<br>
<CAObj+SUHNiK-q7wjWi3CrZ74+4LJgEv==<a href="mailto:iWRcp3VPau2SSy36w@mail.gmail.com" target="_blank">iWRcp3VPau2SSy36w@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
hi,<br>
<br>
1. Can I use Shibboleth IDP as commercial SSO provider.<br>
yes - but consider contributing to the project<br>
<br>
2. Can I clone the IDP server code at local and debug, build and<br>
deploy my own? If yes, please hint the IDP server code repository.<br>
<a href="https://wiki.shibboleth.net/confluence/display/DEV/Source+Code+Access" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/display/DEV/Source+Code+Access</a><br>
<br>
3. Few of our customer are using Okta, so can we replace okta with<br>
Shibboleth IDP.<br>
probably. I dont know what you are doing with Okta or how you are using it.<br>
<br>
4. Is any sample SP is given to test IDP server with configuration<br>
details?<br>
you can run up your own local one using the SP product or use one of the<br>
several public SAML testing points<br>
(eg <a href="https://samltest.id/" rel="noreferrer" target="_blank">https://samltest.id/</a>)<br>
<br>
> 5. How do we manage the users, their session. Is it in DB or in<br>
> memory.<br>
><br>
either (as per the docs)<br>
<br>
alan<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://shibboleth.net/pipermail/dev/attachments/20190730/20cda4ee/attachment-0001.html" rel="noreferrer" target="_blank">http://shibboleth.net/pipermail/dev/attachments/20190730/20cda4ee/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Tue, 30 Jul 2019 10:10:48 +0100<br>
From: Alan Buxey <<a href="mailto:alan.buxey@myunidays.com" target="_blank">alan.buxey@myunidays.com</a>><br>
To: Shib Dev <<a href="mailto:dev@shibboleth.net" target="_blank">dev@shibboleth.net</a>><br>
Subject: Re: How do I use. Some documentation is available?<br>
Message-ID:<br>
<CAObj+SVRuL9KFR6ZOog-HYfq-jzWbpaZRu-2kKdZ=<a href="mailto:v_7wLh%2BwQ@mail.gmail.com" target="_blank">v_7wLh+wQ@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="UTF-8"<br>
<br>
..and these really arent dev related questions. please use the users<br>
mailing list<br>
<br>
alan<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Tue, 30 Jul 2019 09:19:47 +0000<br>
From: "K, Amit (MIND)" <<a href="mailto:Amit.K@mind-infotech.com" target="_blank">Amit.K@mind-infotech.com</a>><br>
To: Shib Dev <<a href="mailto:dev@shibboleth.net" target="_blank">dev@shibboleth.net</a>><br>
Subject: RE: How do I use. Some documentation is available?<br>
Message-ID: <<a href="mailto:a174213365044c4bba6aaf7eb79dbf47@mind-infotech.com" target="_blank">a174213365044c4bba6aaf7eb79dbf47@mind-infotech.com</a>><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
Ohh... my mistake... I will keep in mind from next time.<br>
BTW, Thanks for the support.<br>
<br>
-----Original Message-----<br>
From: dev [mailto:<a href="mailto:dev-bounces@shibboleth.net" target="_blank">dev-bounces@shibboleth.net</a>] On Behalf Of Alan Buxey<br>
Sent: Tuesday, July 30, 2019 2:41 PM<br>
To: Shib Dev <<a href="mailto:dev@shibboleth.net" target="_blank">dev@shibboleth.net</a>><br>
Subject: Re: How do I use. Some documentation is available?<br>
<br>
..and these really arent dev related questions. please use the users mailing list<br>
<br>
alan<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net" target="_blank">dev-unsubscribe@shibboleth.net</a><br>
<br>
________________________________<br>
<br>
The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus/trojan/worms/malicious code transmitted by this email. <a href="http://www.motherson.com" rel="noreferrer" target="_blank">www.motherson.com</a><br>
<br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net" target="_blank">dev-unsubscribe@shibboleth.net</a><br>
<br>
------------------------------<br>
<br>
End of dev Digest, Vol 97, Issue 9<br>
**********************************<br>
</blockquote></div></div>