use of JWT and / or STS with Shibboleth IDP?

[Patrick Brunmayr]

Hello

Alltough i am not the creator of this post this topic gets more and more important for me. Our SAML SSO infrastucture
needs to work together with newer OAuth APIS. I am also very interested how this can be done.

Thank u

Am 06.10.2016 um 16:02 schrieb David Langenberg:
Sounds like what you’re really looking for here is OAuth/OIDC implicit profile?

Dave


--
David Langenberg
Asst. Director, Identity Management
The University of Chicago

From: users <users-bounces at shibboleth.net><mailto:users-bounces at shibboleth.net> on behalf of Liam Hoekenga <liamr at umich.edu><mailto:liamr at umich.edu>
Reply-To: Shib Users <users at shibboleth.net><mailto:users at shibboleth.net>
Date: Wednesday, October 5, 2016 at 3:06 PM
To: Shib Users <users at shibboleth.net><mailto:users at shibboleth.net>
Subject: use of JWT and / or STS with Shibboleth IDP?

We're working to deploy IBM's API Manager.  The API manager integration team has asked if the IDP can provide an authentication token...

>From our meeting notes..
- After successful shibboleth authentication, pass a token back to the APIm for use during the session
- After successful shibboleth authentication, generate a token and display it on a web page so that the token can be used on the command line.
- Create a URI that will take as input a base 64-encoded uniqname:token pair, and tell whether the token is still valid.

Based on their request, it feels a lot like they're asking for us to provide a security token service, or for for the IDP to produce JWT.

Am I reading this right? How have others in the community provided this functionality?

Liam



--
Patrick Brunmayr
LINZ AG TELEKOM
Infrastruktur & Netzwerktechnik
Internet Services

Die LINZ AG TELEKOM ist ein Geschäftsbereich der LINZ STROM GmbH
für Energieerzeugung, -handel, -dienstleistungen und Telekommunikation.

4021 Linz,  Wiener Straße 151, Austria
Tel.:        +43(0)732/3400-5639
Fax:        +43(0)732/3400-155639
E-Mail:    p.brunmayr at linzag.at<mailto:p.brunmayr at linzag.at>
Internet:  www.linzag-telekom.at<http://www.linzag-telekom.at>

FN 199533 g des Landesgerichtes Linz
Zertifiziert nach:
EN ISO   9001 Qualitätsmanagement (QM)
OHSAS 18001 Arbeitsschutzmanagementsystem
ISO/IEC 27001 Informationssicherheits-Managementsystem (ISMS)




LINZ AG für Energie, Telekommunikation, Verkehr und Kommunale Dienste
A-4021 Linz, Wiener Straße 151, Postfach 1300, Tel. +43/732/3400-0, E-Mail: info at linzag.at


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161006/53e0f168/attachment-0001.html>