Problem migrating to Shibboleth IdP v3 from v2 using a custom login filter

Simone Avogadro simone.avogadro at gmail.com
Fri Oct 16 07:56:01 EDT 2015


Hi,
  we've been running and IDP with v2 and our custom
authentication+authorization.
  Our custom authentication is basically a servlet filter which sits on top
of:

   - /Authn/*
   - /profile/SAML2/Unsolicited/SSO
   - /profile/SAML2/Redirect/SSO

 and wraps request/response to provide a Principal
 this is done by redirecting to a custom auth webapp which is providing SSO
etc... (OAuth 2 like) with both authentication+authorization.
 This is done using HttpServletHelper.getLoginContext as in
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPassLoginPage
to discover the EntityID of the Service Provider (this is needed for
authorization purposes).

  Any suggestion on how to do this on IDP v3 ?
  in brief: We need to obtain the SP's EntityID from inside a filter
servlet which sits on top of the IDP servlets

   many thanks!

       -Simone
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151016/6b66cf37/attachment.html>


More information about the users mailing list