Shibboleth and WebSphere SSO

[Day, Peter W]

Hi,

Part of my job at Emory University is to help people here who are seeking to Shibbolize web applications.

Has anyone gotten SSO to work between an application running on IBM's WebSphere application server (version 8.5) and a Shibbolized application running in a non-WebSphere environment?

The desired usage scenario is that an attempt to access either application without a Shibboleth session initiates a Shibboleth IdP login, and after the Shibboleth login, the user can immediately access either application as an authenticated user of that environment without being asked to login again.

The above description is slightly simplified in that it does not discuss all the sessions that might be involved.

The IBM folks I talked to could pronounce Shibboleth correctly and said they support SAML, but otherwise said they did not know how WebSphere security worked and knew nothing about Shibboleth. From what I have been able to learn by Googling around, WebSphere can support SAML 2.0 Web Single Sign-on, and can run behind Apache HTTP. However, the examples I found seem to always use IBM software-specific sessions and work between instances of WebSphere.

Thinking about how the scenario might be implemented leads to the question: Has anyone Shibbolized IBM's WebSphere application server?

Any ideas about getting this to work would be appreciated.

Thanks!
Peter Day
Enterprise Middleware Admin
Emory University

________________________________

This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130712/1d8835d9/attachment-0001.html