Where to specify which ACS to use for logging in?
Scott Koranda
skoranda at gmail.com
Mon Dec 19 09:35:21 EST 2016
On Mon, Dec 19, 2016 at 8:13 AM, Tom Scavo <trscavo at gmail.com> wrote:
> On Fri, Dec 16, 2016 at 11:25 AM, Scott Koranda <skoranda at gmail.com>
> wrote:
> >
> > The artifact binding flows help with a specific LIGO use case.
> > In short, the background threads used by a browser to fetch
> > image URLs embedded in the main HTML page but served from
> > other SPs will often succeed in the SSO flow when the artifact
> > binding is used because the flow only involves GET requests
> > and no POSTs.
>
> I've never understood this use case. I don't see what the artifact
> protocol has to do with images.
>
>
The image URLs are just one example and use case that we need to address.
The point is that the background processing will follow 302 redirects and
GETs and so will complete an artifact resolution flow. They will not,
however, execute Javascript to push an HTTP-POST flow to completion.
Thanks,
Scott K
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161219/530d86bc/attachment.html>
More information about the users
mailing list