Kerberos TGS with Shibboleth IdP

[Cantor, Scott]

On 4/28/15, 9:16 AM, "King, David" <dsmk at bu.edu> wrote:

>How are people addressing this need using SAML 2.0 with Shibboleth IdP 2.x?  

Assuming you mean a TGT, nobody has provided any contributions that do anything with a ticket. Both (Shibboleth) versions have support for preserving the ticket in a private credential of the Java Subject at least in memory but do nothing with it.

Stanford seemed to be most interested in the use case originally, but I've heard nothing about it since.

>Is this easier/possible with the recently released IdP 3.0?  

Not really, though there are more formal hooks for doing things like preserving the ticket within the serialized objects stored in the session (it's not preserved, I'm just saying the hooks are there).

-- Scott