Short-circuit /Login

[Peter Schober]

* Martin Haase <Martin.Haase at DAASI.de> [2014-03-11 14:04]:
> I guess I am missing a feature. Assume I have an SP session still valid,
> is there a way to go to
> https://sp.example.org/Shibboleth.sso/Login?target=https%3A%2F%2Fsp.example.org%2Fresource.asp
> and the SP re-using its session, not redirecting to the IdP but directly
> to the target? I'm looking more or less for a single handler, honoring
> SP session if existent, and redirecting to the IdP if not. Perhaps an
> extra attribute for
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessionCreationParameters
> ?

Why not put that in the issue tracker?

Until something like that exists you could:

* Not send the browser there if a session exists (D'oh! :)

* Create a CGI script (or whatever) that's protected with lazy
  sessions which does that check for you (in one place) and redirects
  to the SP's login handler if no session is found, accepting (and
  including in the redirect) the same query parameters as the login
  handler, e.g. /foo/Login?entityID=bar&target=baz
  Then point to that script whenever you want to invoke the login
  handler.

-peter