X509 Authn behind Apache proxy

[Ian Bobbitt]

On 6/22/17 8:27 PM, Peter Schober wrote:
> * Ian Bobbitt <ibobbitt at globalnoc.iu.edu> [2017-06-23 02:14]:
>> I'm running the IdP in Jetty behind Apache.
> In order to use httpd modules for which no alternative exist in the
> IDP today?  Otherwise you could run the container as webserver
> (ditching httpd) and just use the IDP's built-in X.509 support?
>
Unfortunately, yes. Part of my current login flow passes through another 
SSO that has an Apache module. Client certificates are also an 
all-or-nothing thing in Jetty, as far as I can tell.

-- Ian

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3639 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20170622/293014ff/attachment.p7s>