IdP authentication to webservice

Peter Schober peter.schober at univie.ac.at
Mon Feb 22 07:30:36 EST 2016


* Petr Novak <petr.novak at ruk.cuni.cz> [2016-02-22 13:21]:
> please help me: I need to to configure IdP authentication to
> non-standard interface (no LDAP or AD or Kerberos).

This has no relation to the thread you're replying to ("Resolver
plugin 'myLDAP' produced no value"), so instead of replying to
something completely unrelated compose a new email to the list.

> Client website calls server by POST method on defined URL with
> following structure:
[...]
> How to configure authentication and attribute resolution?

AFAIU it the IDP does not have code built-in to support arbitrary
methods of authentication and attribute resolution. So that's not
something you merely need to configure correctly. You would have to
write an extension (i.e., code) for the IDP.
For IDPv2 there are a few "web service" extensions documented in the
SHIB2 wiki space. No idea whether (a) those are of any help to you,
and (b) whether any of those have been or are being ported to IDPv3.
-peter


More information about the users mailing list