Shib SP ECP - a few woes

[Giovanni Bajo]

Il giorno 19/ott/2013, alle ore 20:45, "Cantor, Scott" <cantor.2 at osu.edu> ha scritto:

> On 10/18/13 10:06 PM, "Giovanni Bajo" <rasky at develer.com> wrote:
> 
>> in ecp.py, it is an out-of-band information that is stored in a
>> configuration dictionary at the beginning of the file. That sounds
>> strange, given that a browser (non-ECP) client doesn't need this
>> out-of-band information, since SP will redirect it to the correct URL for
>> authentication.
> 
> It isn't a redirect.


What I meant is that, in the WebSSO profile, there is no need for this additional out-of-band information. When the browser accesses the SP, it gets redirected to the IdP URL for authenticating the user.

On the contrary, on the ECP profile, the SP doesn't convey this information to the client, and the client needs to be aware of where the IdP is located.
-- 
Giovanni Bajo   ::  rasky at develer.com
Develer S.r.l.  ::  http://www.develer.com

My Blog: http://giovanni.bajo.it





-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4207 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131019/bf1423a3/attachment.bin