<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style>
<!--
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif"}
p.msochpdefault, li.msochpdefault, div.msochpdefault
{margin-right:0in;
margin-left:0in;
font-size:10.0pt;
font-family:"Calibri","sans-serif"}
span.emailstyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
span.EmailStyle19
{font-family:"Calibri","sans-serif";
color:#1F497D}
span.BalloonTextChar
{font-family:"Tahoma","sans-serif"}
.MsoChpDefault
{font-size:10.0pt;
font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div>
<div style="font-family:Calibri,sans-serif; font-size:11pt">Bonnie,<br>
I AM on vacation until Thursday. I will give a look at success factor then.<br>
Jean Marie<br>
<br>
Envoyé depuis un mobile<br>
</div>
</div>
<hr>
<span style="font-family:Tahoma,sans-serif; font-size:10pt; font-weight:bold">De :
</span><span style="font-family:Tahoma,sans-serif; font-size:10pt">Bonnie Jones</span><br>
<span style="font-family:Tahoma,sans-serif; font-size:10pt; font-weight:bold">Envoyé :
</span><span style="font-family:Tahoma,sans-serif; font-size:10pt">18/07/2012 02:14</span><br>
<span style="font-family:Tahoma,sans-serif; font-size:10pt; font-weight:bold">À :
</span><span style="font-family:Tahoma,sans-serif; font-size:10pt">Shib Users</span><br>
<span style="font-family:Tahoma,sans-serif; font-size:10pt; font-weight:bold">Objet :
</span><span style="font-family:Tahoma,sans-serif; font-size:10pt">RE: Using Sharepoint Credentials for Remote User Authentication</span><br>
<br>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Jean Marie, </span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thank you for your reply. I think I will need to stick with SharePoint as that is our begin point for all things related to compensation. My service provider is Success Factors.
</span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D">I found your document “Step-by-step Guide: Federated Collaboration with Shibboleth 2.0 and SharePoint 2010 Technologies”. Although we don’t use ADFS I thought it would give me some insight. I know very little
about SharePoint. Based on your response I have been looking at creating an external content type. I’m not sure how to launch that since I am just calling a url and passing the shire, target and providerid. I can see where I can choose to impersonate a
unique user. </span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D">Is the external content type what you were thinking of or is there a different web part that you would recommend?</span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D">Bonnie</span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span></p>
<div>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>THIA Jean-Marie<br>
<b>Sent:</b> Friday, July 13, 2012 2:43 AM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> RE: Using Sharepoint Credentials for Remote User Authentication</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<div>
<div>
<p class="MsoNormal">Hi Bonnie,<br>
<br>
>From what I understand your service provider is Shibboleth enable, your users are authenticated on the network using AD and connect seamlessly to SharePoint.<br>
And yours users should access the provider application without sign in.<br>
<br>
Is the application accessed directly ? In this case you should rely on Kerberos as Shibboleth back end<br>
Is the application exposed through a webpart ? You may impersonate to a unique user.<br>
<br>
Jean Marie<br>
<br>
Envoyé depuis un mobile</p>
</div>
</div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt; font-family:"Times New Roman","serif"">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">De :
</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">Bonnie Jones</span><span style="font-size:12.0pt; font-family:"Times New Roman","serif""><br>
</span><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">Envoyé :
</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">13/07/2012 01:01</span><span style="font-size:12.0pt; font-family:"Times New Roman","serif""><br>
</span><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">À : </span>
</b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif""><a href="mailto:users@shibboleth.net">users@shibboleth.net</a></span><span style="font-size:12.0pt; font-family:"Times New Roman","serif""><br>
</span><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">Objet :
</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">Using Sharepoint Credentials for Remote User Authentication</span><span style="font-size:12.0pt; font-family:"Times New Roman","serif""></span></p>
<div>
<div>
<p class="MsoNormal">Hello,</p>
<p class="MsoNormal">We have purchased a Performance Management package to replace one built in-house. It is hosted externally. I have a requirement for our users to connect without having to enter their username and password. Since they have already logged
into the network and again into our intranet Sharepoint site they have already been authenticated and should just be able to seamlessly access this application. </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">As a starting point I have installed Shibboleth IdP 2.3.6 on a Windows Server with Tomcat 6.0. I am successfully connecting to my service provider using Idp Initiated SSO and UsernamePassword Auth handler connecting to Active Directory
with LDAP. The only attribute I need to pass is their userid. I have a form on a jsp page that autosubmits with the parameters for Idp Initiated SSO. Shibboleth is installed on a separate server from Sharepoint.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Now that I have that working I expected to use the remote user handler and somehow set the header information from Sharepoint. I can pick up the userid with javascript from the sharepoint user context and am looking at ajax to set the
header information. The alternative is to use the IE Activex control to pick off the userid of the person logged into the workstation and forget about sharepoint but I am still not sure how to set the header information.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Has anyone had any experience with this? If so can you point me in a direction or is there an alternative that still meets this requirement?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Thanks.</p>
<p class="MsoNormal">Bonnie</p>
</div>
</div>
</div>
</div>
</body>
</html>