Redirect User without asking for IdP.

[Saurabh Tyagi]

Thanks Peter and Scott!!

Thanks and Regards
Saurabh Tyagi


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Saurabh Tyagi
Sent: Tuesday, July 16, 2013 11:27 AM
To: 'Shib Users'
Subject: RE: Redirect User without asking for IdP.

Hello All,

Please check below link for "How to pass entityID to SP". 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessionCreation
Parameters




Thanks and Regards
Saurabh Tyagi


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Saurabh Tyagi
Sent: Tuesday, July 16, 2013 11:03 AM
To: 'Shib Users'
Subject: RE: Redirect User without asking for IdP.

>> Can I access that parameter at Embedded Discovery Service  side?

>If you already know the IdP's entityID you don't need the EDS. You just
pass it to your SP's Login handler.


How can I do this?


Thanks and Regards
Saurabh Tyagi


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Peter Schober
Sent: Monday, July 15, 2013 7:34 PM
To: users at shibboleth.net
Subject: Re: Redirect User without asking for IdP.

* Saurabh Tyagi <saurabh.tyagi at thepsi.com> [2013-07-15 13:08]:
> If I write some kind of parameter(Idp's EntityId) in URL while
> accessing the application which is behind sp.

You either have to do IdP discovery (i.e., asking the subject) or make
up things that allow you to "sidestep" discovery. (While possible I'd
steer clear of automating selection of the IdP based on the HTTP User
Agent's IP address, as the subject may want to select another IdP.)

The latter usually involves giving specially crafted links (or
resources at your server) to the institution, which will always
initiate a session with that institution's IDP, e.g. using the
requireSessionWith content setting.
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPContentSettings

Such constructs are sometimes called "WAYFless URLs" since accessing
those does not (visibly) invoke a WAYF ("Where Are You From", what is
now standardized as "IdP discovery") service.

Much of that depends on how sessions are initiated, wheather active or
lazy protection is being used, etc.

> Can I access that parameter at Embedded Discovery Service  side?

If you already know the IdP's entityID you don't need the EDS. You
just pass it to your SP's Login handler.
-peter
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net



--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net



--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net