Shibboleth as an IDP or SP

[Joe8313]

Nate,

Thanks for the reply.  Like I said, I new to all of this.  I am currently trying to get my Shibboleth setup so I can try to test but that is proving to be an interesting endeavor as well.  I can get the Tomcat page but not Shibboleth status page.  Back to more reading.

Thanks

Joseph Matthews
Network Administrator and Security Specialist
Butler County Community College
Butler PA  16001
724.287.8711 Ext 8313
Joe.matthews at bc3.edu

From: Nate Klingenstein [via Shibboleth] [mailto:ml-node+s1660669n7591819h8 at n2.nabble.com]
Sent: Tuesday, November 26, 2013 9:58 PM
To: Joe Matthews
Subject: Re: Shibboleth as an IDP or SP

Joe,

It's very likely they set up Shibboleth as their IdP.

But know that Shibboleth doesn't have any password change facilities built in to the login handlers that come out of the box.  You will have the extension points and the ability to customize behavior since it's open source, so it will be able to do what you need it to do, but some development of a custom login handler will likely be required, particularly to force password change at first login.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler

I don't know how this compares to the complexity you'd face trying to do this purely using ADFS(probably easier with Shibboleth), but I'd quantify it as not a trivial exercise with stock Shibboleth.

Hope this helps,
Nate.

On Nov 26, 2013, at 6:23 PM, Joe8313 <[hidden email]</user/SendEmail.jtp?type=node&node=7591819&i=0>>
 wrote:


But we ran into a problem with forcing password change at first login and
self-service password changes.  So I did some reading and some people are
saying that they are doing it using both Shibboleth and ADFS.  Problem is,
they didn't say if they setup Shibboleth as a IDP or as the SP.  I am
thinking as the IDP but I don't want to spend a lot of time trying to set it
up and figure it out if that is not correct.  Does anyone know if that would
be correct?


--
To unsubscribe from this list send an email to [hidden email]</user/SendEmail.jtp?type=node&node=7591819&i=1>
________________________________
If you reply to this email, your message will be added to the discussion below:
http://shibboleth.1660669.n2.nabble.com/Shibboleth-as-an-IDP-or-SP-tp7591815p7591819.html
To unsubscribe from Shibboleth as an IDP or SP, click here<http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=7591815&code=am9lLm1hdHRoZXdzQGJjMy5lZHV8NzU5MTgxNXwtMTA2MzUxNDQ1Nw==>.
NAML<http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-as-an-IDP-or-SP-tp7591815p7592002.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131202/c1acb14f/attachment.html