Shibboleth integration with external idp and java ee/.Net application

[Claude Libois]

Thanks for all the explanation !!!!!
We don't plan to put the sp on apache httpd for the moment for 2 reasons:
- httpd runs on solaris OS and our infrastructure seems to have some
trouble to built the sp plugin for it...
- Whith sp on httpd we still need to do something to create a java/.Net
user session so that application could use authenticate user(with Principal
in java) information.
Thanks for all the time spent to answer me.



2017-03-16 21:41 GMT+01:00 Peter Schober <peter.schober at univie.ac.at>:

> * Peter Schober <peter.schober at univie.ac.at> [2017-03-16 21:38]:
> > > How is it possible that the idp detects that the user has already
> > > been indentified on it's own system ? My guess was that a cookie was
> > > set on the idp domain with the session id.
> >
> > Yes, but what the IDP does to recognize the subject is not specified
> > by SAML).
>
> Also, there's no need to set an HTTP Cookie "on the idp domain" (as in
> a cookie any host sharing a DNS domain with the IDP can read), only a
> cookie for the FQDN of the IDP itself suffices.
> The IDP is the one setting the cookie, and the IDP is the only one
> needing to read it back from the HTTP User Agent.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170316/bf61c586/attachment.html>