Remote_User IDP authentication

[Christopher Bland]

Hello All,

I've been reading up on Remote_User authentication and am unclear on a 
few things.  If I've read the docs correctly I can have a Remote_User 
handler in handler.xml, which has a unspecified AuthenticationMethod.  
In my Apache config I specify a authentication method inside a 
<Location> tag.  Once the user authenticates with the method specified 
in the <Location> tag they are passed into the IDP, which will say that 
the user is valid based on the fact that Remote_User Header is set.

If my understanding of the concepts is correct, is the following possible:

If I have a SP-A and an IDP-A on the same machine, can I send a remote 
SP to the Remote_User handler of the IDP-A, which in turn validates 
based on a location protected by the SP-A?

If so can, I should be able to have multiple SessionInitiator 
definitions to associate SP-A with IDP-A plus an additional IDP.

If SP-A authentication is associated with multiple IDPs, I can specify a 
default IDP if a session does not exist or use previous session from any 
associated IDP?


Thanks in advance,

-Chris

-- 
fdu logo 	
Christopher Bland
Systems Manager
Information Systems and Technology
*1000 River Road, Teaneck NJ 07666*
Mail Stop: T-BH1-01
phone: 201-692-2414 | fax: 201-692-2494 | email: chris at fdu.edu 
<mailto:chris at fdu.edu>
"Fairleigh Dickinson University will never
                                  ask for your password. Please do not 
share it with others!"

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120215/a479ba8f/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: small-full-fdu.gif
Type: image/gif
Size: 4243 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120215/a479ba8f/attachment.gif 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: phone.gif
Type: image/gif
Size: 306 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120215/a479ba8f/attachment-0001.gif 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fax.gif
Type: image/gif
Size: 116 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120215/a479ba8f/attachment-0002.gif 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mail.gif
Type: image/gif
Size: 853 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120215/a479ba8f/attachment-0003.gif