Shibboleth Through the Browser Only

[Tompkins,Charles R]

Make sure you get the IdP and SP metadata exchanged out-of-band and know
when the IdP metadata changes.

Regards,
-Charles

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Jeffrey Crawford
Sent: Thursday, February 27, 2014 7:30 PM
To: users at shibboleth.net
Subject: Shibboleth Through the Browser Only

There has been a desire to host SP on our network that is behind a firewall,
which would not allow any communication between the SP and our IdP directly.

I believe that as long as we are not using Attribute Query or Artifact
Resolution that all the communication goes through the browser, so even
though the SP can't talk to the IdP directly, the fact that the browser can
will ensure everything will work.

Am I correct?

Jeffrey E. Crawford
ITS Application Administrator (IdM)
831-459-4365
jeffreyc at ucsc.edu <mailto:jeffreyc at ucsc.edu> 


Both pilots and IT professionals require training and currency before
charging into clouds!

---------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6020 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20140228/2fd06cb5/attachment.bin