How to support API single sign on in Shibboleth IdP

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2013-05-28 21:14]:
> >> I am wondering, what is the best way to support SSO for these Javascript
> >> APIs if our product is connecting to an IdP for authentication.
> >
> >SAML (and Shibboleth) has ECP for that.
> 
> Or you'll probably be better off implementing some kind of ability for the
> Javascript to tell that a login needs to happen as an error code of some
> kind, and have the script trigger the browser as a whole to get the
> session established.

I was erroneously thinking that the API consumer was not a webbrowser
(but then Javascript outside the browser isn't all that common and the
"product" is "already connecting to an IdP", so very likely is a browser).
-peter