<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Nate,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thanks for the reply. Like I said, I new to all of this. I am currently trying to get my Shibboleth setup so I can try to test but that is proving to be an interesting endeavor as well. I can get the Tomcat page but not Shibboleth status page. Back to more reading.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thanks<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Joseph Matthews<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Network Administrator and Security Specialist <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Butler County Community College<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Butler PA 16001<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>724.287.8711 Ext 8313<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="/user/SendEmail.jtp?type=node&node=7592002&i=0" target="_top" rel="nofollow" link="external">[hidden email]</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Nate Klingenstein [via Shibboleth] [mailto:<a href="/user/SendEmail.jtp?type=node&node=7592002&i=1" target="_top" rel="nofollow" link="external">[hidden email]</a>] <br><b>Sent:</b> Tuesday, November 26, 2013 9:58 PM<br><b>To:</b> Joe Matthews<br><b>Subject:</b> Re: Shibboleth as an IDP or SP<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Joe, <o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>It's very likely they set up Shibboleth as their IdP.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>But know that Shibboleth doesn't have any password change facilities built in to the login handlers that come out of the box. You will have the extension points and the ability to customize behavior since it's open source, so it will be able to do what you need it to do, but some development of a custom login handler will likely be required, particularly to force password change at first login.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler" target="_top" rel="nofollow" link="external">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler</a><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>I don't know how this compares to the complexity you'd face trying to do this purely using ADFS(probably easier with Shibboleth), but I'd quantify it as not a trivial exercise with stock Shibboleth.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Hope this helps,<o:p></o:p></p></div><div><p class=MsoNormal>Nate.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Nov 26, 2013, at 6:23 PM, Joe8313 <<a href="/user/SendEmail.jtp?type=node&node=7591819&i=0" target="_top" rel="nofollow" link="external">[hidden email]</a>><o:p></o:p></p></div><div><p class=MsoNormal> wrote:<o:p></o:p></p></div><p class=MsoNormal><br><br><o:p></o:p></p><p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif"'>But we ran into a problem with forcing password change at first login and<br>self-service password changes. So I did some reading and some people are<br>saying that they are doing it using both Shibboleth and ADFS. Problem is,<br>they didn't say if they setup Shibboleth as a IDP or as the SP. I am<br>thinking as the IDP but I don't want to spend a lot of time trying to set it<br>up and figure it out if that is not correct. Does anyone know if that would<br>be correct?</span><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><br>-- <br>To unsubscribe from this list send an email to <a href="/user/SendEmail.jtp?type=node&node=7591819&i=1" target="_top" rel="nofollow" link="external">[hidden email]</a> <o:p></o:p></p><div class=MsoNormal align=center style='text-align:center'><hr size=1 width="100%" noshade style='color:#CCCCCC' align=center></div><div><div><p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Tahoma","sans-serif";color:#444444'>If you reply to this email, your message will be added to the discussion below:<o:p></o:p></span></b></p></div><p class=MsoNormal><span style='font-size:9.0pt;font-family:"Tahoma","sans-serif";color:#444444'><a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-as-an-IDP-or-SP-tp7591815p7591819.html" target="_top" rel="nofollow" link="external">http://shibboleth.1660669.n2.nabble.com/Shibboleth-as-an-IDP-or-SP-tp7591815p7591819.html</a> <o:p></o:p></span></p></div><div style='margin-top:4.8pt'><p class=MsoNormal style='line-height:18.0pt'><span style='font-size:8.5pt;font-family:"Tahoma","sans-serif";color:#666666'>To unsubscribe from Shibboleth as an IDP or SP, <a href="" target="_top" rel="nofollow" link="external">click here</a>.<br><a href="http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml" target="_top" rel="nofollow" link="external"><span style='font-size:7.0pt;font-family:"Times New Roman","serif"'>NAML</span></a> <o:p></o:p></span></p></div></div>
<br/><hr align="left" width="300" />
View this message in context: <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-as-an-IDP-or-SP-tp7591815p7592002.html">RE: Shibboleth as an IDP or SP</a><br/>
Sent from the <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html">Shibboleth - Users mailing list archive</a> at Nabble.com.<br/>