Android Application Question

[Marc Boorshtein]

>
>
>
> So the android app needs to present something to the SP like a browser
> would present cookies.  If the user isn't authn/authz'd currently we'd open
> a browser, point it at the SP and complete the login flow (
> https://wiki.shibboleth.net/confluence/display/CONCEPT/FlowsAndConfig)
> but at the end of step 6 we'd issue another 302 to the Intent of the
> Android or iOS app to get them back into the native application...
>
>
>
>
See my last email.  in your case what you'd probably do is get the
assertion, present it to your web service for a cookie then use that.
Also, could go the OAuth2 route and generate a token that could be used as
a header instead of a cookie (which i know is a header but it has its own
rules around state)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170104/6582a7f5/attachment.html>