Request attributes as a webservice without login/SSO

Jehan Procaccia Jehan.Procaccia at it-sudparis.eu
Fri Feb 12 14:59:11 EST 2016


Le 12/02/2016 19:35, Cantor, Scott a écrit :
>> is there a way in the shibboleth IDP to allow as a webservice, the
>> request of attributes without using the SSO part of the process ?
> Yes, SAML attribute query has always been supported.
Yes but I can only find old docs/sample from 1.3

http://bacedifo.blogspot.fr/2009/09/query-shibboleth2-attribute-authority.html
and that long thread back in 2008
https://lists.internet2.edu/sympa/arc/shibboleth-users/2008-11/msg00390.html

before going into those old "cookbook" , are these still the recommended 
way to request attributes wihtout login , and is it still supported in 
shib2 and idpv3 ?
I see now the "ECP" profile 
(https://wiki.shibboleth.net/confluence/display/CONCEPT/ECP) , would you 
advise me to go into that direction instead ?
>> Is that the Service to request ? how ?
> Read the SAML standard, basically. It's fairly vanilla SOAP.
you mean http://saml.xml.org/saml-specifications , that's quite long ... 
can you just point me to one of  "core", "profile" or "binding" !?

Thanks .

>
> -- Scott
>



More information about the users mailing list