Back Channel Communications in shibboleth.

[Eddie Harari]

Hi ,

   Can anyone point me in the right direction on the following subject please :

  I have installed shibboleth and it is working with some SP's using
the BROWSER REDIRECT method.
  what if i want my SP to talk directly to the IDP instead of via
browser redirect. ( suppose the browser cant access the IDP on the
network level or  due to security issues ).

  Is there a method that the SP will take the credentials from the
user and send them via "back channel" to the IDP and the talk will be
IDP -> SP directly and not via browser ?


 thanks ,

   Eddie.