Securely passing

Peter Schober peter.schober at univie.ac.at
Fri Dec 7 11:12:42 EST 2018


* Howes, Nick <N.Howes at warwick.ac.uk> [2018-12-07 16:49]:
> Our v3 IdP delegates to our main proprietary login server through
> the RemoteUser flow. This works fine but the login server only knows
> that it's authenticating for the IdP and nothing about what relying
> party the IdP is servicing, so we can't make any business decisions
> on the login screen or even tell the user what they're signing in
> to.

I guess the External authn flow could do whatever you needed to?
https://wiki.shibboleth.net/confluence/display/IDP30/ExternalAuthnConfiguration

-peter


More information about the users mailing list