Secure SOAP Web Service with Shib?

[Chad La Joie]

It really depends on what you're looking for.  IdP 2.3 does support
SAML ECP out of the box and that would allow you to get a SAML
assertion, via HTTP but without a browser.  So, that's the first step.
 Then the client must understand what to do with the assertion (e.g.,
how to attach it to the SOAP message) and the SOAP service must
understand what it means and how to process it.  Those parts have
nothing to do with Shib.

On Wed, Oct 5, 2011 at 17:07, Bryan Wooten <bryan.wooten at utah.edu> wrote:
> I have a request from a developer on using our Incommon Shib Idp to secure
> his SOAP web service. Is this even possible?
>
>
>
> A little googling led me to this from 2007:
>
>
>
> https://lists.internet2.edu/sympa/arc/shibboleth-users/2007-06/msg00022.html
>
>
>
> “> On 6/4/07, Chad La Joie
> < lajoie at georgetown.edu>
> wrote:
>>> No, Shibboleth is web application bound. Future versions of Shibboleth
>>> will likely make it easier to support things like this but quite
>>> honestly there still aren't interoperable standards to do this kind of
>>> thing yet.”
>
>
>
> Any feedback or direction will be greatly appreciated.
>
>
>
> Cheers,
>
>
>
> Bryan
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered