Shibboleth IDP trust with other IDP

krrishv krish.v at gmail.com
Mon Mar 10 15:43:31 EDT 2014


If i do something like below it works. I commented the
urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified from the UsernamePassword
Handler. Now i went and assigned the defaultAuthenticationMethod for SP
either urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified or
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport Now it
redirects to either remote user or usernamepasswd handler. Is that a right
approach?


<LoginHandler xsi:type="RemoteUser" 
        protectedServletPath="/Authn/RemoteUser">
       
<AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</AuthenticationMethod>
        
    </LoginHandler>

      
    
    <LoginHandler xsi:type="UsernamePassword" 
                   jaasConfigurationLocation="file:///C:\Program Files
(x86)\Internet2\Shib2Idp/conf/login.config">          
       
<AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</AuthenticationMethod>
        
    </LoginHandler> 



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-IDP-trust-with-other-IDP-tp7596134p7596572.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list