Questions starting to implement Shibboleth IDP

[Robert Law]

I guess what is not clear to me is whether or not Shibboleth puts up the
login page and passes the credentials to the external authentication system.

On Tue, Dec 30, 2014 at 5:12 PM, Nate Klingenstein <ndk at internet2.edu>
wrote:

>  Robert,
>
>    1. Can my authentication process display a login page for the user in
> their browser?
>
>
>  As long as you can honor the SAML rules of forced authentication and is
> passive, I think it would be fine.  Note well the must here.
>
>  https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal
>
>   2. After I have authenticated the user,  where can I find the
> LoginHandler interface and what does it mean to invoke
> edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine#returnToAuthenticationEngine(HttpServletRequest,HttpServletResponse
> .?
>
>
>  I’ve heard that this interface is much easier to implement.  I think
> it’s closer to the basis for IdPv3, as well.
>
>  https://wiki.shibboleth.net/confluence/display/SHIB2/Multi-Context+Broker
>
>  But, basically, you just set CGI variables and then invoke the IdP at
> the right path.
>
>  Hope this helps,
> Nate.
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141231/a610ade8/attachment-0001.html