Is it possible to hit the IdP login form directly from a browser?

[Yaowen Tu]

Thanks Nate. That is a very useful page. I have also searched around and
found that Salesforce is using SAML + OAuth to authenticate and authorize
native client:

http://wiki.developerforce.com/page/Single_Sign-On_for_Desktop_and_Mobile_Applications_using_SAML_and_OAuth

Are you familiar with this approach? Is it widely used? It seems that in
order to continue with this approach the critical part is that SP needs to
support SAML and OAuth, and native client needs to support OAuth.

I also see some articles about combining SAML and OAuth together, any
comments with it?

Comparing with ECP approach, what are the pros and cons?

I also remember somewhere in the wiki I saw that in the new SAML version,
you are going to further standardize the ECP method, especially the
interaction between client and IdP for authentication. Any more details?


Yaowen


On Fri, Aug 31, 2012 at 9:44 PM, Nate Klingenstein <ndk at internet2.edu>wrote:

> Yaowen,
>
> That's exactly one of the approaches.  You may find the NET+ Identity
> Guidance for Services non-browser access section a good place to get
> some more ideas.  It's not very specific and technical though, because
> we can't get specific about the huge variety of applications and
> protocols in the world.
>
>
> https://spaces.internet2.edu/display/NetPlusIDG/NET+Plus+Identity+Guidance+for+Services
> #NETPlusIdentityGuidanceforServices-6.NonBrowserAccess
>
> Take care,
> Nate.
>
> On Sep 1, 2012, at 4:40 , Yaowen Tu wrote:
>
> > Do you know how SAML users achieve mobile app login? Is this where
> > ECP should be considered?
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120904/f3ee63c2/attachment-0001.html