SP provided username password along with SAMLRequest

Chad La Joie lajoie at itumi.biz
Tue Apr 24 19:06:33 BST 2012


No, since there is no standard-compliant way to do what you just said.

On Tue, Apr 24, 2012 at 14:04, Chen, Jack <jack.chen at twcable.com> wrote:
> I got Shib IDP working to accept the SAMLRequest and provide login page with
> login form. The form will take the username and password and use LDAP
> backend user store to verify identity and provide SAMLResponse back to my SP
> when user/pwd is correct. The login page will provide error message when
> receiving wrong credentials. All work as expected. However, I have a
> different IDP implementation scenario that I wonder if I can do with Shib
> IDP.
>
>
>
> If I set up the login page on a SP (trusted by Shib IDP) and then post the
> username, password along with SAMLRequest all together to the Shib IDP
> (through HTTP-POST binding). Is there any way to configure the Shib IDP to
> process all parameters against the LDAP user store, checking on the
> SAMLRequest, and then provide SAMLResponse back to SP when login is
> successful, and some type of error response when login is failed? Not sure
> if the Shib IDP has the ability to do this?
>
>
>
> Thanks for any guidance.
>
>
>
> Jack
>
>
> ________________________________
> This E-mail and any of its attachments may contain Time Warner Cable
> proprietary information, which is privileged, confidential, or subject to
> copyright belonging to Time Warner Cable. This E-mail is intended solely for
> the use of the individual or entity to which it is addressed. If you are not
> the intended recipient of this E-mail, you are hereby notified that any
> dissemination, distribution, copying, or action taken in relation to the
> contents of and attachments to this E-mail is strictly prohibited and may be
> unlawful. If you have received this E-mail in error, please notify the
> sender immediately and permanently delete the original and any copy of this
> E-mail and any printout.
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered


More information about the users mailing list