Urgent help required
Peter Schober
peter.schober at univie.ac.at
Thu Oct 27 05:59:50 EDT 2016
* Virajitha Sarma <virajitha.sarma at globallogic.com> [2016-10-27 08:45]:
> I am trying to setup Shibboleth Identity Provider in my
> Organization. And I could successfully install and configure the
> Identity Provider. But instead of using the Identity Provider login
> page, I would like to use my Service Provider Login page for
> authentication. Is there any process to achieve this in Shibboleth?
> Any can we configure shibboleth to pick up the username and password
> fields in the service provider page.
If you only have a single IDP and a single SP and both are under full
control of the same organisation, arguably both SAML and Shibboleth
are overkill.
If you're adding an IDP to the mix in order to make further resources
available to the set of subjects currently using your SP, turning the
existing SP into a SAML SP and moving the authentication process to
the SAML IDP would be the recommended way of doing this.
When you configure the IDP to use the SP's existing data source
(possibly an RDBMS of some sorts) for authentication subjects can
continue to use the exact same credentials they're using now to log in
to the SP.
You can certainly externalize the authentication process from the IDP
and keep it at the SP. The documentation details the ways this can be
done (probably "External" in your case).
> Something like Authnrequest that also accepts some parameters that
> the IdP can use for authentication.
Not interoperably, and not advisable either way, no.
-peter
More information about the users
mailing list