Testing applications with Shibboleth

[Cantor, Scott]

> Question 1:  Connecting applications to use Shibboleth, does this require new
> configurations on the Service Provider or the Identity Provider, or both?

If you mean two SPs, it requires exchanging metadata; the second is the same as the first in a general sense. If you're talking about "applications" in a single server hosting both sense, you would have to understand the Shibboleth SP logical and physical model for treating "applications" uniquely, if that's even desired, and I'd refer you to the wiki for that, I wrote about it at length a long while ago.

> Question 2:  Does anyone know of any documentation on how to get
> Shibboleth to work with CAC cards?

There's nothing there for me to go on, but I can speculate that it certainly won't work without a custom login flow being developed for the IdP unless there's a native JAAS module in existence for whatever this is.

The authentication layer and how to customize it in general is documented as best our limited resources have permitted, and the existing flows are examples that can be looked at.

-- Scott