Shibboleth IdP JWT authentication module

[Philip Brusten]

Hi

We developed an authentication module based on a JWT-token which is send 
to the IdP via a common domain cookie.

We use this to enable Single Sign-On between our account management 
system and Shibboleth IdP3 system who share a common domain.

https://github.com/KULeuven-CCIS/idp-authn-jwt

The code makes use of the Nimbus JWT library: 
https://connect2id.com/products/nimbus-jose-jwt

You could add this to your MFA TransitionMap, e.g.:

     <util:map id="shibboleth.authn.MFA.TransitionMap">
         <entry key="">
             <bean parent="shibboleth.authn.MFA.Transition" 
p:nextFlow="authn/jwt" />
         </entry>

         <entry key="authn/jwt">
             <bean parent="shibboleth.authn.MFA.Transition">
                 <property name="nextFlowStrategyMap">
                     <map>
                         <entry key="ReselectFlow" value="authn/Password" />
                     </map>
                 </property>
             </bean>
         </entry>
         <!-- An implicit final rule will return whatever the final flow 
returns. -->
     </util:map>

Regards,

Philip