Back Channel Communications in shibboleth.

[Cantor, Scott]

On 6/5/12 7:20 AM, "Eddie Harari" <eddie.harari at gmail.com> wrote:
>
>I understand that this is part of ECP profile support and that this is
>now part of the shibboleth core.

No, it's not ECP except on the SP side. The IdP half is an extension. The
client portion is entirely left to the use case. The only known code for
this is in Java, and was done by Unicon.

There are substantial differences between pure ECP and this work and a
vanilla ECP client would not handle the IdP interactions involved.

>I would like to know if there is a code sample (PHP or so ) for the
>ECP delegated authetication and also if ECP delegated authenticatin is
>supported in the IDP or i should install some kind of a module into
>the IDP to support ECP delegated authentication.

Steven Carmody had some very early proof of concept work in PHP under
development, it's not public yet. Nothing else I'm aware of but Java.

>( I could not understand that from the documentation ).

https://spaces.internet2.edu/display/ShibuPortal/IdPDelegationExtension

-- Scott