Decrypting attribute return from IdP on-the-fly

[Griffin Cheng [CLIB]]

Dear all,

The institution I work has a propriety system which uses its own authentication method.  But now the management wants to use the institution ADFS instead.  Unfortunately, the "username" use by the propriety system is not the same with the username used by ADFS.  To bridge the two systems, the "username" used by the propriety system is encrypted (using GPG) and stored in the corresponding account on ADFS.

So the plan would be : all authentication requests onto the propriety system would be passed to ADFS through Shibboleth.  Upon successful authentication at the ADFS, the credentials, along with the encrypted data back to Shibboleth.  I need to write something to capture this encrypted data from Shibboleth, decrypt it and pass onto the propriety system on-the-fly.

This propriety system also uses Apache as web-server so can I just write a Apache module/extension?  If so, where do I start?


Regards,


Griffin CHENG.
Telephone: 3746 0853

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140127/e711638f/attachment.html