ADFS and Shibboleth Using "MSISIPSelectionPersistent"

[Aaron Howell]

With the new version of ADFS (v3 with 2012r2) this is no longer an option, the code is not made available and it no longer runs out of IIS

I believe this was valid with previous version, however I have not had the experience

Cheers
Aaron

On 24 Jan 2014, at 7:02 am, Randy Wiemer <wiemerr at hotmail.com<mailto:wiemerr at hotmail.com>> wrote:

One solution is to edit the ADFS HomeRealmDiscovery.aspx.cs page to hard-code the selection and redirect to the Shib IdP.

An example is shown below.

Randy



using System;

using Microsoft.IdentityServer.Web.Configuration;
using Microsoft.IdentityServer.Web.UI;

/// <summary>
/// This page enables home realm discovery if this STS is configured to trust multiple claims providers.
///
/// If the persistIdentityProviderInformation setting is enabled and the user has previously
/// selected a claims provider, that claims provider will be used automatically.
/// </summary>
public partial class HomeRealmDiscovery : Microsoft.IdentityServer.Web.UI.HomeRealmDiscoveryPage
{
    protected void Page_Init( object sender, EventArgs e )
    {
        //PassiveIdentityProvidersDropDownList.DataSource = base.ClaimsProviders;
        //PassiveIdentityProvidersDropDownList.DataBind();
    }

 protected void Page_Load(object sender, EventArgs e)
    {
        SelectHomeRealm("https://login.xxxxxx.edu/idp/shibboleth");
    }

    protected void PassiveSignInButton_Click( object sender, EventArgs e )
    {
        SelectHomeRealm( PassiveIdentityProvidersDropDownList.SelectedItem.Value );
    }
}

From: bleb1982<mailto:btl at fischerinternational.com>
Sent: ‎Thursday‎, ‎January‎ ‎23‎, ‎2014 ‎1‎:‎06‎ ‎PM
To: Shib Users<mailto:users at shibboleth.net>

I found this information on the confluence website. My question is. Does each
client have to set the MSISIPSelectionPersistent cookie, or can this be set
automatically for all users in ADFS?

When landing on the ADFS, user will be presented with an option to
authenticate with AD or Shibboleth. To automatically select Shibboleth over
AD, we insert a cookie "MSISIPSelectionPersistent" with a Base64 value of
the EntityID for the Shibboleth IdP:
e.g. echo -n https://idp.example.com/idp/shibboleth | base64
aHR0cHM6Ly9pZHAuZXhhbXBsZS5jb20vaWRwL3NoaWJib2xldGg=



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/ADFS-and-Shibboleth-Using-MSISIPSelectionPersistent-tp7594227.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com<http://nabble.com/>.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone.

Deakin University does not warrant that this email and any attachments are error or virus free.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140123/22562bcb/attachment-0001.html