Extending the Shibboleth Authentication Workflow

[Keith Hazelton]

Joshua,

Unicon did some work on the Shib IdP authN flow for UW-Madison based on Spring Web Flow. It was released under Apache 2 licensing. It might give you the tools you need. 


Here are some pointers:
_______
Slide decks from I2 Member Meeting:
 
http://events.internet2.edu/2011/fall-mm/agenda.cfm?go=session&id=10001976&event=1148
 
The solution is comprised of two components:
 
1) IdP/SWF integration
 
https://github.com/dima767/Shibboleth-IDP-Postlogin-Filter
 
2) SWF that inplements 

https://github.com/dima767/Shibboleth-IDP-Postlogin-Flow

Best,
Bill Thompson, Unicon
_____

On 06/05/12, Joshua Brodie  wrote:
> Hi:
> 
> We currently have Shibboleth Identity Provider v2.2 authenticating
> users using JAAS against our Oracle database.
> 
> Based on request from stakeholders, I have to make a change to the
> authentication workflow.
> 
> i.e. After a person successfully authenticates, the user will be
> prompted to change password is he/she has not done so in last 60 days.
> 
> How best can this be implemented in Shibboleth IdP?
> 
> I am not an expert in JAAS - based on my preliminary investigation, it
> may not be suitable for above workflow.
> 
> Any suggestions on how best to proceed?
> 
> Thanks.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: hazelton.vcf
Type: text/x-vcard
Size: 243 bytes
Desc: Card for "Keith Hazelton" <hazelton at wisc.edu>
Url : http://shibboleth.net/pipermail/users/attachments/20120605/5ef2d57f/attachment.vcf