<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><pre><b><font size="+1">Thanks Peter,<br><br>Appreciate if my understanding is consolidated with following clarifications:<br><br>a) As I see, the ext. auth is called from login-handler provided by shib idp package<br>and the external auth (EA) address is provided in the login-handler.xml (?)<br><br>b) As I see when the Ext auth finishes auth, it should call the <br></font></b><br><b><font size="+1"><code>edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine#<br>returnToAuthenticationEngine(HttpServletRequest,HttpServletResponse</code>);<br><br>However, it is not clear what session variables need to be set by the <br>Ext auth to indicate whether auth failed or succeeded? or is there another<br>way to pass this info?<br><br>And what is the lib (jar) that includes this api/func rettoautheng<br> that 'need to drop
in EA web app?<br><br>Pls note EA is pure web app and does not do any SAML (and thats the reason why we are<br>looking at Shib IDP)<br><br>c) Pls confirm that in this sceneario, no code is needed to be tweaked in Shib Idp?<br>Just only the config xml files?<br><br>Thanks in advance<br><br><br><br><br>List: <a href="http://marc.info/?l=shibboleth-users&r=1&w=2">shibboleth-users</a>
Subject: <a href="http://marc.info/?t=134830282000001&r=1&w=2">Re: external authentication -shib IdP tutorial and config and working mode</a>
From: <a href="http://marc.info/?a=108370509100003&r=1&w=2">Peter Schober <peter.schober () univie ! ac ! at></a>
Date: <a href="http://marc.info/?l=shibboleth-users&r=1&b=201209&w=2">2012-09-22 12:10:17</a>
Message-ID: <a href="http://marc.info/?i=20120922121017.GS22235%20%28%29%20aco%20%21%20net">20120922121017.GS22235 () aco ! net</a></font>
[<a href="http://marc.info/?l=shibboleth-users&m=134831583924669&q=raw">Download message RAW</a>]</b>
* C G <ci_98yr@yahoo.com> [2012-09-22 10:30]:
> 1. What are the files that need to be tweaked, if any, in Shib IdP packag=
e?
> =
> 2. What data goes between the external auth system and Shib? Specifically=
my situation is
> =A0=A0=A0 a) external Auth (EA) system needs only user-id and is self con=
tained in all aspects. It can authenticate
> the user and redirect back the session to Shib. What parameters or http s=
ession variables if any need to be set?
> Yes, both ways, incoming session from Shib to EA and from EA to Shib?
> =
> 3. Any java class tweaking is needed to convey the auth results? The EA c=
an set or pass results?
> BTW, EA has its own API jars that can be dropped in Shib to parse result =
data (not saml, but prop)
> =
> 4. In this scenerio, I dont need Ldap, what are the things 'can get rid o=
f in config?
> =
> Any step by step documentation on this is highly appreciated with
> thanks!
Try this one:
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal</a>
-peter</pre></div></body></html>