Using Sharepoint Credentials for Remote User Authentication

[THIA Jean-Marie]

Hi Bonnie,

>From what I understand your service provider is Shibboleth enable, your users are authenticated on the network using AD and connect seamlessly to SharePoint.
And yours users should access the provider application without sign in.

Is the application accessed directly ? In this case you should rely on Kerberos as Shibboleth back end
Is the application exposed through a webpart ? You may impersonate to a unique user.

Jean Marie

Envoyé depuis un mobile
________________________________
De : Bonnie Jones
Envoyé : 13/07/2012 01:01
À : users at shibboleth.net
Objet : Using Sharepoint Credentials for Remote User Authentication

Hello,
We have purchased a Performance Management package to replace one built in-house.  It is hosted externally.  I have a requirement for our users to connect without having to enter their username and password.  Since they have already logged into the network and again into our intranet Sharepoint site they have already been authenticated and should just be able to seamlessly access this application.

As a starting point I have installed Shibboleth IdP 2.3.6 on a Windows Server with Tomcat 6.0.  I am successfully connecting to my service provider using Idp Initiated SSO and UsernamePassword Auth handler connecting to Active Directory with LDAP.  The only attribute I need to pass is their userid.  I have a form on a jsp page that autosubmits with the parameters for Idp Initiated SSO.  Shibboleth is installed on a separate server from Sharepoint.

Now that I have that working I expected to use the remote user handler and somehow set the header information from Sharepoint.  I can pick up the userid with javascript from the sharepoint user context and am looking at ajax to set the header information.  The alternative is to use the IE Activex control to pick off the userid of the person logged into the workstation and forget about sharepoint but I am still not sure how to set the header information.

Has anyone had any experience with this?  If so can you point me in a direction or is there an alternative that still meets this requirement?

Thanks.
Bonnie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120713/f4955cea/attachment-0001.html