Can the _shibboleth_ credentials be transferred?

[Daniel Södling]

All,


we have the following scenario;

 1. Our service is a web application running on Apache. Lets call this AppA.
 2. We have a second web application that runs in the same Apache
    server. Lets call this AppB.
 3. The user will access the AppB which is an angualrjs driven SPA app.
 4. Accessing AppB triggers the sign-on process via our Idp.
 5. Once logged in the user can enter some search criteria and click on
    a serach button which calls a cgi-script also running in the same
    Apache.
 6. This cgi-script will now try to call AppA using the _shibboleth_
    cookie/token stored in the users broswer.


Step 6 is where we run into problems because it seems that we cannot 
simply transer the credentials token from the users browser session and 
use it in the call from the cgiscript.
Or perhaps, more likely, we are doing it wrong.

Is it possible to work in this manner?
Is it possible to use the _shibboleth_ stored in the users browser and 
then use it from our cgi scritps which runs on the server?

Best Regards
Daniel Södling


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181015/11005a00/attachment.html>