External authentication on a different system than the IdP

[Ian Rifkin]

Hi Brian,

Is it possible to have the external authentication live outside the
> context of the IdP?


Someone with more Shibboleth experience could give a better response, but I
think there's a few ways to accomplish this. We use CoSign (
http://weblogin.org/) to protect directories via Apache webserver (via
mod_cosign). So I just have an Apache webserver in front of a Tomcat
webserver. Apache is there just for mod_cosign. Tomcat is there as our
Shibboleth webserver.

As far as my Shibboleth is concerned it knows nothing about the
authentication mechanism. All it knows it is gets a username from Tomcat
which is getting it passed from Apache.

Seems a bit odd running two webservers, but it gets the job done.

Ian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130724/3e7d4af8/attachment.html