'Deep linking' in Shibboleth

[Eric Goodman]

In case the question was more about defining what a deep link is (rather than just why it’s a good thing): deep linking means allowing users to go to (or bookmark) arbitrary web pages and having authentication happen through that interaction, rather than having to go specifically to dedicated login page to get access to a site.

A non-deep link-supporting setup might require all users to go to http://myapp.example.com/login.html before they can go anywhere else in the app. If the user goes to a page like http://myapp.example.com/secure/myfavoritepage.html directly while unauthenticated, they will likely get an “access denied” error of some sort.

Deep linking would support the user going directly to the “myfavoritepage.html” url, getting directed to their IdP (including selecting it IdP through discovery, etc.) and then after being authenticated being redirecting the user back to the page they originally tried to access.

--- Eric


From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Zico
Sent: Wednesday, January 20, 2016 6:56 AM
To: Shib Users
Subject: 'Deep linking' in Shibboleth

Hi,

I am trying to understand what benefit deep linking in Shibboleth can provide us.... so little confused here.

Is 'Deep linking' actually 'IDP-initiated SSO'?

I have worked with IDP-initiated SSO but never played with 'deep linking'.



--
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160120/07881f78/attachment.html>