RE: ADFS integration

[Randy Wiemer]

If your web site is running on IIS you should investigate replacing the ADFS v1 SP/RP with the Shibboleth SP and simply protect the path to your application.


Randy


From: Park, Alex
Sent: ‎September‎ ‎26‎, ‎2013 ‎4‎:‎33‎ ‎PM
To: users at shibboleth.net
Subject: Re: ADFS integration





Hello,






We have an SP that would like to integrate their ADFS 1.0 with our IDP 2.3.  During our analysis, we ran into several issues/concerns based on several documentations that were provided and found online.  Here are the issues that we found.  We understand that the documents are mainly for integrating ADFS 1.0 and Shib IdP 1.0 , but we’d like to figure out if integration of ADFS 1 and IdP 2 is possible. If so, how much is the effort? We would greatly appreciate any insight to the following:

 


1.      Binding

The binding ADFS 1 supports is “http://schemas.xmlsoap.org/ws/2003/07/secext"”. Does IdP 2 support this binding?

2.      Idp.xml

When integrating ADFS1 with IdP 1, some configurations (for example, ADFS SSO Handler) should be done in idp.xml. With IdP 2, how should they be configured?





Thanks

Alex





______________________________________

Alexander Park

Program Manager – IAMUCLA

Information Management Services

apark at it.ucla.edu

(310) 825 - 5960
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130927/87a3da30/attachment-0001.html