SP provided username password along with SAMLRequest

[Paul Hethmon]

No ability to do it and why would you use SSO if that is your goal? Just authenticate the user via LDAP at the SP application.

Paul


From: <Chen>, Jack <jack.chen at twcable.com<mailto:jack.chen at twcable.com>>
Reply-To: Shibboleth Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Date: Tuesday, April 24, 2012 2:04 PM
To: Shibboleth Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: SP provided username password along with SAMLRequest

I got Shib IDP working to accept the SAMLRequest and provide login page with login form. The form will take the username and password and use LDAP backend user store to verify identity and provide SAMLResponse back to my SP when user/pwd is correct. The login page will provide error message when receiving wrong credentials. All work as expected. However, I have a different IDP implementation scenario that I wonder if I can do with Shib IDP.

If I set up the login page on a SP (trusted by Shib IDP) and then post the username, password along with SAMLRequest all together to the Shib IDP (through HTTP-POST binding). Is there any way to configure the Shib IDP to process all parameters against the LDAP user store, checking on the SAMLRequest, and then provide SAMLResponse back to SP when login is successful, and some type of error response when login is failed? Not sure if the Shib IDP has the ability to do this?

Thanks for any guidance.

Jack

________________________________
This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120424/b472b0f7/attachment.html