Embedding images from another SP

Peter Schober peter.schober at univie.ac.at
Fri Apr 6 11:53:02 EDT 2018


* shibboleth655 at lewenberg.com <shibboleth655 at lewenberg.com> [2018-04-06 16:42]:
> It appears that by clicking on one of the site B images, I
> authenticate to site B which allows all the other images to load
> properly once I go back to the original web page.
> 
> Question: How can I get the images from site B to load on site A's
> web page properly without making the user explicitly visit site B
> first?

You can't. So stop what you're doing or alternatively hack up
something that makes "you'll need to establish a session with both SPs
first" more explicit, e.g. by always circling through "the other" SPs
when a new session is being established. If all else fails the SP's
sessionHook would allow you to do this outside the protected resource.
Or maybe a properly crafted SSO request with an explicit return
parameter that will always cycle though both SPs. Or...
-peter


More information about the users mailing list