Problem migrating to Shibboleth IdP v3 from v2 using a custom login filter
Simone Avogadro
simone.avogadro at gmail.com
Fri Oct 16 07:56:01 EDT 2015
Hi,
we've been running and IDP with v2 and our custom
authentication+authorization.
Our custom authentication is basically a servlet filter which sits on top
of:
- /Authn/*
- /profile/SAML2/Unsolicited/SSO
- /profile/SAML2/Redirect/SSO
and wraps request/response to provide a Principal
this is done by redirecting to a custom auth webapp which is providing SSO
etc... (OAuth 2 like) with both authentication+authorization.
This is done using HttpServletHelper.getLoginContext as in
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPassLoginPage
to discover the EntityID of the Service Provider (this is needed for
authorization purposes).
Any suggestion on how to do this on IDP v3 ?
in brief: We need to obtain the SP's EntityID from inside a filter
servlet which sits on top of the IDP servlets
many thanks!
-Simone
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151016/6b66cf37/attachment.html>
More information about the users
mailing list