Using SAML from non browser client

[Anand Somani]

Hi

I have a use case where we have a thick client which stores the user/passwd
for the user. Want to automatically login this user using SAML, basically
the user should not be prompted, the application should be to login the
user when redirected IdP.

Now with Shibboleth I can possibly use the idpAuthExternal and forward to a
servlet which supports HTTP based basic/digest auth. My case is non typical
(or is it) since there is no user sitting on a browser who can be shown a
login page to collect user/pass. So the questions I have are

   - Since the spec does not really specify how actual auth happens, is
   this something I might have problems with when my application wants to use
   another Idp
   - Does SAML support this, from the all the reading I have done it does
   not prevent it, but am I in someways pushing it?

Any other suggestions/gotchas that I should watch out for are welcome.

Thanks
Anand
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111216/19aff338/attachment.html