Integration of Shibboleth with existing login functionality

[Nate Klingenstein]

Marcus,

1.        Can a Shibboleth SP installed on Apache, protecting an application (say, a Java App), first query the application before determining if it will direct the user to their identity provider or use an alternative login mechanism?

I believe the SP doesn't have the ability to query the application before creating a session, but session creation can be made optional and triggered by the application itself.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessionInitiator

2.        If the app will  use a Shibboleth IDP, can the Shibboleth SP receive info from the protected application telling it which IDP to use (as if the application was used to discover the IDP)?

The application can indicate which IdP is to be used and various other things by appending values to the query string.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessionCreationParameters

Thanks,
Nate.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130520/bb4ecb16/attachment.html