Shibboleth IdP as the hub in a hub and spoke federation

Cantor, Scott cantor.2 at osu.edu
Mon Mar 3 15:39:40 EST 2014


On 3/3/14, 3:17 PM, "Scott Koranda" <skoranda at gmail.com> wrote:
>
>I am especially interested in hearing of solutions that do not use the
>REMOTE_USER login handler in order to support isPassive and forced
>re-authentication.

Sticking only to the question of how one could do it with Apache plus my
SP, I suppose that could probably be managed with the External login
handler. A small servlet would handle the relaying of policy flags into
/Shibboleth.sso/Login.

-- Scott




More information about the users mailing list