ACS URL or maybe post-auth target redirect?

[Woolf, Carl]

Thank you Nate,

(The doc’s I found after reading your post helped me realize how the Location attribute, in those few places that I had used it, merely appends to the handlerUrl, which may account for my observations/concern about my full paths not getting used.)

I guess that I want to be at a good spot on the spectrum between ‘simply using all the Shibboleth defaults’ and ‘writing my own authentication system from scratch’.

Maybe a better formulation of my goal/question would be:

Can I somehow configure shibboleth2.xml  such that the default Saml2 ACS will delegate to my own …/consume. Alternatively, can I configure shibboleth2.xml such that I can supply/integrate my own custom ACS? Consistent / coherent with the default handlerUrl of ‘Shibboleth.sso’.

Thanks, best wishes, - Carl

From: users <users-bounces at shibboleth.net> on behalf of Nate Klingenstein <ndk at signet.id>
Date: Thursday, July 7, 2022 at 1:06 AM
To: Shib Users <users at shibboleth.net>, users at shibboleth.net <users at shibboleth.net>
Subject: RE: ACS URL or maybe post-auth target redirect?
Carl,

> As my Plan A, I am trying to get my IdP, after authentication, to call my own …/rest/consume, instead of the Shibboleth.sso/SAML2/POST that it is going to now.

If I'm interpreting you correctly, you're trying to use Shibboleth as just an AuthnRequest generator and a system that can speak the DS protocol, and then consume the assertion and manage trust relationships yourself?  It seems like a slightly complex way to go about things and there are probably much easier ways to get that done without using the full Shibboleth SP, and the usual caveats about writing your own authentication and authorization software apply.

Take care,
Nate

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220707/3c77b557/attachment.htm>