programmatic flip between SP-protected / unprotected endpoints

[Nate Klingenstein]

Use Apache?

I don't know of a way to tie in e.g. web.config to Shibboleth.  I can think
of two "reasonable" options:

A)  Protect pages by default, but passively.  If a page owner wants to flip
to active protection, the web resource itself would need to trigger
authentication and enforce rules on its own.
B)  Build a fancy interface for the XML Request Mapper, which can load its
contents from an external file or URI.  You could probably engineer some
system that allowed authenticated users to change the content settings for
their own URLs.  If it's just a boolean for protected or not, it should be
relatively straightforward to reflect that preference in a generated XML
file.

XMLRequestMapper - Service Provider 3 - Confluence (atlassian.net)
<https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335025/XMLRequestMapper>


On Thu, Dec 15, 2022 at 5:29 PM IAM David Bantz via users <
users at shibboleth.net> wrote:

> Operator of institutional web site (lots of depth and distributed control)
> wants to allow page owners to flip back and forth between SP-protected
> (login required) and unprotected (no login required). The operator
> reasonably does not want to be in the loop to re-configure IIS. Suggestions?
>
> David St Pierre Bantz
> U Alaska IAM
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20221215/fcec287a/attachment.htm>