Setting up Shibboleth IdP to mock SAML provider

[Brandon Chinn]

Peter,

Thanks for those links! That tagish code looks perfect for my use-case,
specifically the `FileLogin` class.

The main part I'm having trouble figuring out is how to configure a
Shibboleth IdP, in general, to register an auth flow and SP. Mainly, I
would like clarification on how to fill in this workflow:

1. User goes to
`SHIBBOLETH_HOST/idp/profile/SAML2/Unsolicited/SSO?providerId=foo` in a
browser
2. Shibboleth serves a web form where the user fills out username and
password
3. Shibboleth IdP looks up the ____ element in ____.xml to get the SP
referred to by providerId
4. Shibboleth IdP then looks up the _____ element in ____.xml to get the
auth rules for the given SP
5. Shibboleth IdP looks up the _____ element in ____.xml to find the JAAS
module to use to authenticate the user
6. Shibboleth IdP calls the JAAS module with the user credentials to check
if valid
7. If so, Shibboleth IdP returns a 302 response with the signed SAML
document, and the user is redirected to the SP.

Is this correct? Please let me know, also, if I should be asking another
mailing list (like saml-dev) instead. Thanks!

-- 
Brandon Chinn
LeapYear Technologies (http://leapyear.io)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190606/31afdf6c/attachment.html>