Develop app for IdP users

[Felipe Cardoso]

Hi,

I would like to develop a specific app for my IdP users where they could
see their attributes and customize their preferences, for example changing
their preferred name.


Options:

1 - Create a Java application and deploy it on the same Tomcat where
Shibboleth IdP is running. From the point of view of the IdP, this app is a
trust service provider (I have to establish trust between the IdP and the
SP).


2 - Use WebInterfaces [1]
<https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631851/WebInterfaces>
and
admin flows [2]
<https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631887/Administration>
(e.g. Hello World Module) provided by Shibboleth IdP to develop this
application.


Option 2 looks good to me because I don’t need to set up a “Service
Provider” that will only be used by my IdP and should not be visible to
another IdP in the federation.


My question is: Can I use WebInterfaces and admin flows for this scenario
or should WebInterfaces only be used to create specific applications for
the IdP admin?

I mean, WebInterfaces should not be used to create applications for IdP end
users.

Regards,

-- 
Felipe Cardoso
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20211103/c49afb2a/attachment.htm>