Implementing Salesforce SSO with Shibboleth

[Lior Chaga]

You have every cause to ask "stupid" questions, because I lack experience in this issues, so you should assume I don't know what I'm talking about :-)
I would try explain my needs better:

We have a client side application that uses REST for stateless communication with our server side. 
Let's suppose we have only anonymous authentication, and everybody can view our data.
Now, we'd like to conceal some of our data, and expose it only after a visitor have logged in to Salesforce. So we need to check the use is authenticated in our server side, in order to decide what data will be returned when the REST service is called.

I really don't believe that I need to build my own IdP, unless I misunderstood the whole concept.

Thanks,
Lior.



-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Monday, March 11, 2013 2:36 PM
To: users at shibboleth.net
Subject: Re: Implementing Salesforce SSO with Shibboleth

* Peter Schober <peter.schober at univie.ac.at> [2013-03-11 13:24]:
> * Lior Chaga <Lior.Chaga at modelity.com> [2013-03-11 13:11]:
> > We have a web site with java server-side, and we'd like to implement 
> > SSO with Salesforce. We are using spring framework.
> 
> Where does Shibboleth fit here in and which component are you 
> interested in? http://shibboleth.net/products/

* Lior Chaga <Lior.Chaga at modelity.com> [2013-03-11 13:28]:
> I'm guessing I should use Identity Provider, shouldn't I?

Well, "We have a web site" sounds like your a Service Provider (in SAML terms). So is Salesforce (AFAIK). SPs don't "talk" to SPs and there is no SSO involved either. Hence my probably stupid question.

You could install the IdP as a standalone application/service and connect both your SP and Salesforce to it. Not sure you want this.

Or you could build your own IdP based on OpenSAML Java, which seems to be what you were asking. Most would advise against this because unless you know you're dealing with a very limited and static list of imlpementations and SAML profiles.
Questions regarding building your own SAML IdP should go to the developer mailing list (which is also the OpenSAML mailing list), -peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net