Thanks a lot. The reason I am asking the question is that:<br><br>1) I have a a product that contains a web application, and a server.<br><br>2) They now talk to each other using SOAP message, so currently web app will send a SOAP message to server to do login, and server will do the real authentication<br>
<br>3) Now I want to integrate SSO into our product. If I install the Shib SP, essentially it is the web application(including SP and our own web app) that does the authentication, not the server any more. <br><br>4) We still want server to do the real authentication. Basically, we want to integrate the SP into server instead of the web app. Is it possible to archive that? For example, an use case would be(not sure if it is realistic): user send a SOAP message that contains username and password, then server talk to IdP and finish the authentication. In this case, there is no browser needed.<br>
<br>5) I just came across SAML Enhanced Client or Proxy, which seems to be helpful to my case. Also it seems Shib SP and IdP support ECP. Can you tell me what is that used for? A real example would be great to help me to understand better. <br>
<br>6) It would be perfect if you can also tell me whether I can use ECP to archive my goal.<br><br>Feel free to point out anything that I am wrong.<br><br>Looking forward to hearing from you.<br><br>Best,<br clear="all">
Yaowen<br>
<br><br><div class="gmail_quote">On Fri, Jul 13, 2012 at 12:08 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 7/13/12 3:04 PM, "Yaowen Tu" <<a href="mailto:yaowen.tu@gmail.com">yaowen.tu@gmail.com</a>> wrote:<br>
><br>
>Let me know if this is the correct mail list that I should ask for this<br>
>question.<br>
<br>
</div>The OASIS saml-dev list is the appropriate list for SAML questions.<br>
<div class="im"><br>
>I am studying SAML and SSO, and it looks like the application that use<br>
>SAML need to be a web application and relying on a browser.<br>
<br>
</div>SAML is based on profiles, it's a generic standard. One of the profiles is<br>
for browser SSO.<br>
<div class="im"><br>
>My limited knowledge of SAML tells me that SAML relies on session and<br>
>cookie, which is not available in desktop application or mobile app. Is<br>
>that the only reason? Can you give me more details about this?<br>
<br>
</div>None of that is anything to do with SAML. It doesn't specify anything<br>
about session management, cookies, or anything like that. That's all out<br>
of scope of the standard.<br>
<br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br>