Shibboleth Through the Browser Only

[Jeffrey Crawford]

There has been a desire to host SP on our network that is behind a
firewall, which would not allow any communication between the SP and our
IdP directly.

I believe that as long as we are not using Attribute Query or Artifact
Resolution that all the communication goes through the browser, so even
though the SP can't talk to the IdP directly, the fact that the browser can
will ensure everything will work.

Am I correct?

Jeffrey E. Crawford
ITS Application Administrator (IdM)
831-459-4365
jeffreyc at ucsc.edu

Both pilots and IT professionals require training and currency before
charging into clouds!
---------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140227/145ddccf/attachment.html