Auto-login user programatically?

[Byte Flinger]

Hi

I am trying to test the following scenarion:

1 - User fills some information about himself and submits a form
2 - An action is triggered which creates an user on backend server LDAP (on
IDP side) and redirect the user back to the SP
3 - Once redirected to the SP, the user will be automatically logged in
without having to fill the information he just did.

The idea is to trigger a login request to Shibboleth together with the user
creation on LDAP by programatically calling Unsolicited SSO with the
required information however I am uncertain how to handle the part where
the user is automatically logged in once he is redirected to the SP.

I could redirect the SAML Response gotten from the login request all the
way back to the SP (Via the user browser) however if I understand
correctly, once that happens the SP will just redirect to Shibboleth and
because the user browser will not have the session cookie set, Shibboleth
will once again ask for a login.

I am guessing that if the SP uses that SAML Response when redirecting to
Shibboleth, Shibboleth will notice the user is already logged in, set the
necessary cookies and redirect back to SP, however that sounds like a lot
of unnecessary back and forth.

Are there any suggestions on a better of going about this? I am guessing
the cookie is required for recognizing the user as logged in?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130725/47d535a3/attachment-0001.html