<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Chad,<br>
<br>
Thanks for the link to IdpUserAuthn doc. I had read it before
dealing with another issue but totally missed my current need to
specify the authentication method in Google's custom relying party
tag. Do you think that the following changes will work:<br>
<br>
relying-party.xml<br>
<RelyingParty id="google.com"<br>
provider=<a class="moz-txt-link-rfc2396E" href="https://idp.fdu.edu/idp/shibboleth">"https://idp.fdu.edu/idp/shibboleth"</a><br>
<meta charset="utf-8">
defaultAuthenticationMethod=<font color="#ff0000"><span
class="code-quote" style="color: rgb(0, 145, 0);
background-color: inherit; ">"??????? not sure of appropriate
class for remote user ???????"</span></font><br>
defaultSigningCredentialRef="IdPCredential"><br>
<ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
encryptAssertions="never" encryptNameIds="never" /><br>
</RelyingParty><br>
<br>
handler.xml<br>
<ph:LoginHandler xsi:type="ph:RemoteUser"><br>
<ph:protectedServletPath="/idp/Authn/GoogleApps"><br>
<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:<font
color="#33cc00">?????????</font></ph:AuthenticationMethod>
(don't want to use unspecified because then it becomes default)<br>
</ph:LoginHandler><br>
<br>
web.xml<br>
<servlet><br>
<servlet-name>GoogleAppsAuthHandler</servlet-name><br>
<servlet-class>edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserAuthServlet</servlet-class><br>
<load-on-startup>5</load-on-startup><br>
</servlet><br>
<br>
<servlet-mapping><br>
<servlet-name>GoogleAppsAuthHandler</servlet-name><br>
<url-pattern>/Authn/GoogleApps</url-pattern><br>
</servlet-mapping><br>
<br>
http.conf<br>
<Location /idp/Authn/GoogleApps><br>
<meta charset="utf-8">
AuthType Basic AuthName <span class="code-quote"
style="color: rgb(0, 145, 0); background-color: inherit; ">"Identity
Provider Authentication"</span> <br>
AuthUserFile /PATH/TO/USER/FILE <br>
require valid-user<br>
</Location><br>
<br>
<br>
-Chris<br>
<br>
On 3/6/12 12:18 PM, Chad La Joie wrote:
<blockquote
cite="mid:CACTY7uCEeZ2dU=tEx7aM3M4Kd2Q1Z-ODjSebM4U-S6Dv9d23OQ@mail.gmail.com"
type="cite">
<pre wrap="">Well, I think you're just confused about SAML in general. The public
interface to the IdP are the SAML endpoints that it exposes. When the
request that comes in is an authentication request then the IdP will
try to authenticate a user via one of its configured authentication
mechanisms. This document talks about how the authentication
mechanism is selected:
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPUserAuthn">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPUserAuthn</a>
</pre>
</blockquote>
<div class="moz-signature">
<div id="sig"><br>
</div>
</div>
</body>
</html>