Request attributes as a webservice without login/SSO
Jehan Procaccia
Jehan.Procaccia at it-sudparis.eu
Fri Feb 12 14:59:11 EST 2016
Le 12/02/2016 19:35, Cantor, Scott a écrit :
>> is there a way in the shibboleth IDP to allow as a webservice, the
>> request of attributes without using the SSO part of the process ?
> Yes, SAML attribute query has always been supported.
Yes but I can only find old docs/sample from 1.3
http://bacedifo.blogspot.fr/2009/09/query-shibboleth2-attribute-authority.html
and that long thread back in 2008
https://lists.internet2.edu/sympa/arc/shibboleth-users/2008-11/msg00390.html
before going into those old "cookbook" , are these still the recommended
way to request attributes wihtout login , and is it still supported in
shib2 and idpv3 ?
I see now the "ECP" profile
(https://wiki.shibboleth.net/confluence/display/CONCEPT/ECP) , would you
advise me to go into that direction instead ?
>> Is that the Service to request ? how ?
> Read the SAML standard, basically. It's fairly vanilla SOAP.
you mean http://saml.xml.org/saml-specifications , that's quite long ...
can you just point me to one of "core", "profile" or "binding" !?
Thanks .
>
> -- Scott
>
More information about the users
mailing list