<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style>
<!--
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-size:10.0pt;
font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div>
<div style="font-family:Calibri,sans-serif; font-size:11pt">Hi Bonnie,<br>
<br>
>From what I understand your service provider is Shibboleth enable, your users are authenticated on the network using AD and connect seamlessly to SharePoint.<br>
And yours users should access the provider application without sign in.<br>
<br>
Is the application accessed directly ? In this case you should rely on Kerberos as Shibboleth back end<br>
Is the application exposed through a webpart ? You may impersonate to a unique user.<br>
<br>
Jean Marie<br>
<br>
Envoyé depuis un mobile<br>
</div>
</div>
<hr>
<span style="font-family:Tahoma,sans-serif; font-size:10pt; font-weight:bold">De :
</span><span style="font-family:Tahoma,sans-serif; font-size:10pt">Bonnie Jones</span><br>
<span style="font-family:Tahoma,sans-serif; font-size:10pt; font-weight:bold">Envoyé :
</span><span style="font-family:Tahoma,sans-serif; font-size:10pt">13/07/2012 01:01</span><br>
<span style="font-family:Tahoma,sans-serif; font-size:10pt; font-weight:bold">À :
</span><span style="font-family:Tahoma,sans-serif; font-size:10pt">users@shibboleth.net</span><br>
<span style="font-family:Tahoma,sans-serif; font-size:10pt; font-weight:bold">Objet :
</span><span style="font-family:Tahoma,sans-serif; font-size:10pt">Using Sharepoint Credentials for Remote User Authentication</span><br>
<br>
<div>
<div class="WordSection1">
<p class="MsoNormal">Hello,</p>
<p class="MsoNormal">We have purchased a Performance Management package to replace one built in-house. It is hosted externally. I have a requirement for our users to connect without having to enter their username and password. Since they have already logged
into the network and again into our intranet Sharepoint site they have already been authenticated and should just be able to seamlessly access this application. </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">As a starting point I have installed Shibboleth IdP 2.3.6 on a Windows Server with Tomcat 6.0. I am successfully connecting to my service provider using Idp Initiated SSO and UsernamePassword Auth handler connecting to Active Directory
with LDAP. The only attribute I need to pass is their userid. I have a form on a jsp page that autosubmits with the parameters for Idp Initiated SSO. Shibboleth is installed on a separate server from Sharepoint.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Now that I have that working I expected to use the remote user handler and somehow set the header information from Sharepoint. I can pick up the userid with javascript from the sharepoint user context and am looking at ajax to set the
header information. The alternative is to use the IE Activex control to pick off the userid of the person logged into the workstation and forget about sharepoint but I am still not sure how to set the header information.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Has anyone had any experience with this? If so can you point me in a direction or is there an alternative that still meets this requirement?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Thanks.</p>
<p class="MsoNormal">Bonnie</p>
</div>
</div>
</body>
</html>