configuring IDP authN to use IPAddress for some devices ....

[Christopher Bongaarts]

On 5/30/2013 2:06 PM, Steven Carmody wrote:
> Has anyone developed an approach for auto-magically logging in users to
> an IDP who are at "walk in" devices in the libraries ?

No, but if I were asked to, I would probably pursue one of these paths:

- Build it into our local LoginHandler, supplying a departmental account 
configured to return appropriate "anonymous lib walk-in" attributes if 
the client IP matches a set of IPs or CIDR networks

- Stand up a separate IdP that *only* does IP auth, and have the SPs in 
question use appropriate discovery or session initiation mechanisms to 
direct those terminals to the IP IdP

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%