shibboleth idp login form

[Nick Duff]

Hey Nate,

Thanks! That clears up my confusion and gives me the answer for moving
forward
Cheers!

On 1/10/2017 14:09, "Klingenstein, Nate" <nklingenstein at calstate.edu> wrote:

> Nick,
>
>
> The IdP expects for login to occur as part of a full login flow to an
> application, and there isn't really a facility for just logging into the
> IdP itself.  I think an automatic portal page based on frequently accessed
> services would be really cool.  The developers already have too much to do,
> though, and there's no reason that needs to be bundled with the core
> distribution.
>
>
> In absence of an SP, you can mock up a request using the Unsolicited
> endpoint, but you'll end up nowhere if there's no service at the end of
> that.  It's not really going to tell you anything more than the status
> handler by default.
>
>
> If you just want the absolute fastest way I can think of to display the
> login page, add SAML2.SSO as a supported profile for Unverified relying
> parties in relying-party.xml and issue a valid request to the unsolicited
> endpoint.
>
>
> https://wiki.shibboleth.net/confluence/display/IDP30/
> UnsolicitedSSOConfiguration
>
>
>
> <https://wiki.shibboleth.net/confluence/display/IDP30/UnsolicitedSSOConfiguration>
> https://wiki.shibboleth.net/confluence/display/IDP30/
> RelyingPartyConfiguration
>
> Hope this helps,
>
> Nate.
> ------------------------------
> *From:* users <users-bounces at shibboleth.net> on behalf of Nick Duff <
> nick.duff22 at gmail.com>
> *Sent:* Saturday, September 30, 2017 5:36:58 PM
> *To:* users at shibboleth.net
> *Subject:* shibboleth idp login form
>
> I'm wanting to move to shibboleth from webauth.
> Although I am having a bit of confusion with some of the concepts.
> I have setup an idp with apache proxy/jetty/shib3 using ldap password
> auth. It is up and running and i can navigate to idp/status etc.
>
> Where I am a bit confused is, I can't seem to find a direct login form.
> I have tried idp/profile/authn/Password but it gets in a redirect loop to
> its own url.
>
> Is the example login form directly accessible or do i need to employee a
> service/server like apache using shib module to redirect to shib idp to get
> presented the login form?
>
> As with webauth you could still natively browse directly the the login
> form and login to get a session.
>
> Any help here would be appreciated! Cheers
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171001/f0449f13/attachment.html>