Shibboleth implementation for an application

[Paul Hethmon]

On 9/2/13 9:17 AM, "Robin_Elisha" <rabindra.srivastava.itbhu06 at gmail.com>
wrote:

>Can a entityId be shared with multiple applications?

It can. Whether it is a good idea is a business decision. If you do it,
then you have the single identity to the IdP.

>As per my understanding, then when someone logs into my application the
>request redirects to SP which then validates the request through IDP and
>send the response and header to the application and application just needs
>to verify that the response is positive or negative and based on that
>allow
>login. Let me know if that is true?

The SP redirects the browser to the IdP. The IdP performs authentication
and directs the browser with the SAML Response back to the SP. The SP then
validates the response by validating the digital signing of the message.
The SP can then gather user information from the SAML Response about the
user.

The technical overview is a good place to start:  Technical Overview
<http://www.oasis-open.org/committees/download.php/27819/sstc-saml-tech-ove
rview-2.0-cd-02.pdf>

Paul