<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello All,<br>
<br>
I've been reading up on Remote_User authentication and am unclear on
a few things. If I've read the docs correctly I can have a
Remote_User handler in handler.xml, which has a unspecified
AuthenticationMethod. In my Apache config I specify a
authentication method inside a <Location> tag. Once the user
authenticates with the method specified in the <Location> tag
they are passed into the IDP, which will say that the user is valid
based on the fact that Remote_User Header is set.<br>
<br>
If my understanding of the concepts is correct, is the following
possible:<br>
<br>
If I have a SP-A and an IDP-A on the same machine, can I send a
remote SP to the Remote_User handler of the IDP-A, which in turn
validates based on a location protected by the SP-A? <br>
<br>
If so can, I should be able to have multiple SessionInitiator
definitions to associate SP-A with IDP-A plus an additional IDP.<br>
<br>
If SP-A authentication is associated with multiple IDPs, I can
specify a default IDP if a session does not exist or use previous
session from any associated IDP?<br>
<br>
<br>
Thanks in advance,<br>
<br>
-Chris<br>
<br>
<div class="moz-signature">-- <br>
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<title>OIRT Signature</title>
<style media="all" type="text/css">
#sig{
margin:6px 0 0 15px;
padding:6px;
width: 530px;
}
#sig .person{
font-family:Georgia, "Times New Roman", Times, serif;
font-size:12px;
font-style:italic;
color:#333333;
font-weight: bolder;
padding: 0 0 0 15px;
}
#sig .title{
font-family:Georgia, "Times New Roman", Times, serif;
font-size:10px;
font-style:italic;
color:#333333;
padding: 0 0 0 15px;
letter-spacing: .1em;
line-height: 10px;
}
#sig .row {
line-height:12px;
color:#333333;
padding-top: 13px;
padding: 10px 0 0 15px;
font-family: Verdana, Arial, Helvetica, sans-serif;
font-size: 10px;
}
#sig .top {
font-family:Georgia, "Times New Roman", Times, serif;
font-size:11px;
font-style:italic;
color:#CC0000;
padding:7px 0 0 0;
font-weight: bolder;
}
#sig .toptwo {
font-family:Georgia, "Times New Roman", Times, serif;
font-size:11px;
font-style:italic;
color:#CC0000;
padding-left: 120px;
font-weight: bolder;
}
#sig .row a:link, .row avisited {
color:#5CBDBF;
text-decoration:none;
}
#sig .row a:over{
color:#333333;
border: 1px black dotted;
}
</style>
<div id="sig">
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td valign="top" width="150"><img moz-do-not-send="false"
src="cid:part1.08070302.06090304@fdu.edu" alt="fdu
logo" height="62" width="140"></td>
<td>
<div class="person">Christopher Bland</div>
<div class="title">Systems Manager<br>
Information Systems and Technology</div>
<div class="row"> <strong>1000 River Road, Teaneck NJ
07666</strong><br>
Mail Stop: T-BH1-01<br>
<img moz-do-not-send="false"
src="cid:part2.02010709.01000405@fdu.edu"
alt="phone" height="10" width="13">: 201-692-2414 |
<img moz-do-not-send="false"
src="cid:part3.01090406.06060600@fdu.edu" alt="fax"
height="13" width="15">: 201-692-2494 | <img
moz-do-not-send="false"
src="cid:part4.09060907.02000002@fdu.edu"
alt="email" height="11" width="12">: <a
href="mailto:chris@fdu.edu">chris@fdu.edu</a> </div>
</td>
</tr>
<tr>
<td colspan="2">
<div class="top">"Fairleigh Dickinson University will
never<br>
ask for your
password. Please do not share it with others!"</div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</body>
</html>