Questions starting to implement Shibboleth IDP

[Nate Klingenstein]

Robert,

1. Can my authentication process display a login page for the user in their browser?

As long as you can honor the SAML rules of forced authentication and is passive, I think it would be fine.  Note well the must here.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal

2. After I have authenticated the user,  where can I find the LoginHandler interface and what does it mean to invoke edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine#returnToAuthenticationEngine(HttpServletRequest,HttpServletResponse.?

I’ve heard that this interface is much easier to implement.  I think it’s closer to the basis for IdPv3, as well.

https://wiki.shibboleth.net/confluence/display/SHIB2/Multi-Context+Broker

But, basically, you just set CGI variables and then invoke the IdP at the right path.

Hope this helps,
Nate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141231/009b7ad2/attachment.html