Re: ADFS and Shibboleth Using "MSISIPSelectionPersistent"

[Randy Wiemer]

One solution is to edit the ADFS HomeRealmDiscovery.aspx.cs page to hard-code the selection and redirect to the Shib IdP.


An example is shown below.


Randy 




using System;


using Microsoft.IdentityServer.Web.Configuration;
using Microsoft.IdentityServer.Web.UI;


/// <summary>
/// This page enables home realm discovery if this STS is configured to trust multiple claims providers.
///
/// If the persistIdentityProviderInformation setting is enabled and the user has previously
/// selected a claims provider, that claims provider will be used automatically.
/// </summary>
public partial class HomeRealmDiscovery : Microsoft.IdentityServer.Web.UI.HomeRealmDiscoveryPage
{
    protected void Page_Init( object sender, EventArgs e )
    {
        //PassiveIdentityProvidersDropDownList.DataSource = base.ClaimsProviders;
        //PassiveIdentityProvidersDropDownList.DataBind();
    }    
 
 protected void Page_Load(object sender, EventArgs e)
    {
        SelectHomeRealm("https://login.xxxxxx.edu/idp/shibboleth");
    } 


    protected void PassiveSignInButton_Click( object sender, EventArgs e )
    {
        SelectHomeRealm( PassiveIdentityProvidersDropDownList.SelectedItem.Value );
    }
}





From: bleb1982
Sent: ‎Thursday‎, ‎January‎ ‎23‎, ‎2014 ‎1‎:‎06‎ ‎PM
To: Shib Users





I found this information on the confluence website. My question is. Does each
client have to set the MSISIPSelectionPersistent cookie, or can this be set
automatically for all users in ADFS?

When landing on the ADFS, user will be presented with an option to
authenticate with AD or Shibboleth. To automatically select Shibboleth over
AD, we insert a cookie "MSISIPSelectionPersistent" with a Base64 value of
the EntityID for the Shibboleth IdP:
e.g. echo -n https://idp.example.com/idp/shibboleth | base64
aHR0cHM6Ly9pZHAuZXhhbXBsZS5jb20vaWRwL3NoaWJib2xldGg=



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/ADFS-and-Shibboleth-Using-MSISIPSelectionPersistent-tp7594227.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140123/42c9a17b/attachment-0001.html