Forced Authn and IdPUnsolicitedSSO

[Cantor, Scott]

On 8/4/14, 4:27 PM, "Mike Wiseman" <mike.wiseman at utoronto.ca> wrote:

>We are working on integrating an IBM DataPower appliance with our websso
>environment (which is shib idp 2.3.8). The plan is to use
>IdPUnsolicitedSSO since the DataPower, from my knowledge at the moment,
>does not support  generating SAML requests. There is a requirement to
>support forced authn though. Is it possible, besides via the SAML
>request, to force authn at the idp via the idpunsolicitedsso transaction?

Nope. You can spoof a request, or you can create your own protocol to do
anything you want by create an alternative version of the
UnsolicitedSSODecoder class and plugging that into the handler.xml file.

-- Scott