still a few issues with login script to shibboleth identity server
Peter Schober
peter.schober at univie.ac.at
Tue Oct 9 12:46:11 EDT 2012
* Joseph Norris <jozefn at sonic.net> [2012-10-09 17:36]:
> The company I am working for has decided to not run an SP - the just
> need their product to allow single signon for the company that is
> running an SP.
This means is that you're implementing a SAML IdP yourself. In Perl.
The Shibboleth software (and mailing list) can't help you here since
you don't intend to use it.
Unless you devise ways that would help here. E.g. perform the
authentication in your application, bootstrap a Shib SP session from
that (cf. NativeSPBackDoor in the wiki) and have this SP protect a
Shib IdP with REMOTE_USER or "external" authentication. That IdP would
then provide SSO to the other SP.
-peter
More information about the users
mailing list