Shibboleth integration with external idp and java ee/.Net application

[Peter Schober]

* Claude Libois <clibois.work at gmail.com> [2017-03-16 22:01]:
> - httpd runs on solaris OS and our infrastructure seems to have some
> trouble to built the sp plugin for it...

Well, httpd + the Shib SP should run where your application runs.
If that's Solaris, well, my sympathies.

> - Whith sp on httpd we still need to do something to create a
> java/.Net user session so that application could use authenticate
> user(with Principal in java) information.

For Java: If using AJP (as suggested, and detailed in the Shib SP
documentation) things pass through in an easily usable form, including
request.getRemoteUser() returning the REMOTE_USER cgi varaible the
Shib SP set for you (which you can set very flexibly from the SAML in
the Shib SP configuration).
How to populate principals in Java I don't know, but others will (and
likely you can hook some kind of filter the servlet container, like
Tomcat's Valves or whatever.)

For .NET: I have no real experience with that to speak of, but from
the documetation it seems that's easy enough:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPAttributeAccess
-peter