shibboleth idp login form

[Klingenstein, Nate]

Nick,


The IdP expects for login to occur as part of a full login flow to an application, and there isn't really a facility for just logging into the IdP itself.  I think an automatic portal page based on frequently accessed services would be really cool.  The developers already have too much to do, though, and there's no reason that needs to be bundled with the core distribution.


In absence of an SP, you can mock up a request using the Unsolicited endpoint, but you'll end up nowhere if there's no service at the end of that.  It's not really going to tell you anything more than the status handler by default.


If you just want the absolute fastest way I can think of to display the login page, add SAML2.SSO as a supported profile for Unverified relying parties in relying-party.xml and issue a valid request to the unsolicited endpoint.


https://wiki.shibboleth.net/confluence/display/IDP30/UnsolicitedSSOConfiguration


<https://wiki.shibboleth.net/confluence/display/IDP30/UnsolicitedSSOConfiguration>https://wiki.shibboleth.net/confluence/display/IDP30/RelyingPartyConfiguration


Hope this helps,

Nate.

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Nick Duff <nick.duff22 at gmail.com>
Sent: Saturday, September 30, 2017 5:36:58 PM
To: users at shibboleth.net
Subject: shibboleth idp login form

I'm wanting to move to shibboleth from webauth.
Although I am having a bit of confusion with some of the concepts.
I have setup an idp with apache proxy/jetty/shib3 using ldap password auth. It is up and running and i can navigate to idp/status etc.

Where I am a bit confused is, I can't seem to find a direct login form.
I have tried idp/profile/authn/Password but it gets in a redirect loop to its own url.

Is the example login form directly accessible or do i need to employee a service/server like apache using shib module to redirect to shib idp to get presented the login form?

As with webauth you could still natively browse directly the the login form and login to get a session.

Any help here would be appreciated! Cheers
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171001/37b0ba07/attachment.html>