AD/LDAP Password as a SAML Attribute

[Patrick Le]

I know this doesn't conform to SAML Specs/security, but does anyone know if there is a way to enumerate a user's AD password into a SAML attribute response? We're trying to integrate SSO into VmWare View. Aside from Horizon Workspace, there's no built in SAML authentication support within View. We have the environment behind F5 and are trying to figure out a way to manipulate a SAML login into providing VmWare with the user information it needs. Ideally we would want the password to come in through the SAML assertion so it's properly signed/encrypted/etc as opposed to a separate post from our login page to another webpage not protected by Shibboleth.

Thanks

Patrick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150318/21862e23/attachment-0001.html