Shibboleth Password with LDAP - no login screen

[Cantor, Scott]

On 9/29/16, 11:43 AM, "users on behalf of eln00b" <users-bounces at shibboleth.net on behalf of jbru0003 at synchronoss.com> wrote:

> That's how I got started.  Now I want to set up my own local instance that I
>   have more control over.  My apps worked just fine against testshib.org and
>    SSOCircle.  My goal is to dig into this next level.

testshib is an IdP and an SP. You can't stand up an IdP without an SP, the IdP just doesn't do anything on its own, whether the SP is real or pretend, it's still got to be provisioned to the IdP for it to do anything.

All the IdP does today is respond to authentication requests from SPs or requests that emulate them. And there are a few adminstrative flows/functions, but that's it.

I suppose it's true that in the next release there would be a way to turn authentication on to protect, say, the status page, and that will actually be a way to "test" the IdP in some ways without there being any SP. That's a change from any current versions. I will have to think about how we might leverage that in our getting started material.

-- Scott