<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>With the new version of ADFS (v3 with 2012r2) this is no longer an option, the code is not made available and it no longer runs out of IIS</div>
<div><br>
</div>
<div>I believe this was valid with previous version, however I have not had the experience</div>
<div><br>
</div>
<div>Cheers</div>
<div>Aaron</div>
<br>
<div>
<div>On 24 Jan 2014, at 7:02 am, Randy Wiemer <<a href="mailto:wiemerr@hotmail.com">wiemerr@hotmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div dir="ltr" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div data-externalstyle="false" dir="ltr" style="font-family: Calibri, 'Segoe UI', Meiryo, 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', sans-serif; font-size: 12pt;">
<div>One solution is to edit the ADFS HomeRealmDiscovery.aspx.cs page to hard-code the selection and redirect to the Shib IdP.</div>
<div><br>
</div>
<div>An example is shown below.</div>
<div><br>
</div>
<div>Randy</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>using System;</div>
<div><br>
</div>
<div>using Microsoft.IdentityServer.Web.Configuration;<br>
using Microsoft.IdentityServer.Web.UI;</div>
<div><br>
</div>
<div>/// <summary><br>
/// This page enables home realm discovery if this STS is configured to trust multiple claims providers.<br>
///<br>
/// If the persistIdentityProviderInformation setting is enabled and the user has previously<br>
/// selected a claims provider, that claims provider will be used automatically.<br>
/// </summary><br>
public partial class HomeRealmDiscovery : Microsoft.IdentityServer.Web.UI.HomeRealmDiscoveryPage<br>
{<br>
protected void Page_Init( object sender, EventArgs e )<br>
{<br>
//PassiveIdentityProvidersDropDownList.DataSource = base.ClaimsProviders;<br>
//PassiveIdentityProvidersDropDownList.DataBind();<br>
} <span class="Apple-converted-space"> </span><br>
<br>
protected void Page_Load(object sender, EventArgs e)<br>
{<br>
SelectHomeRealm("<a href="https://login.xxxxxx.edu/idp/shibboleth" target="_parent">https://login.xxxxxx.edu/idp/shibboleth</a>");<br>
} </div>
<div><br>
</div>
<div> protected void PassiveSignInButton_Click( object sender, EventArgs e )<br>
{<br>
SelectHomeRealm( PassiveIdentityProvidersDropDownList.SelectedItem.Value );<br>
}<br>
}</div>
<div><br>
</div>
<div style="padding-top: 5px; border-top-color: rgb(229, 229, 229); border-top-width: 1px; border-top-style: solid;">
<font face=" 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif'" style="line-height: 15pt; letter-spacing: 0.02em; font-family: Calibri, 'Segoe UI', Meiryo, 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', sans-serif; font-size: 12pt;"><b>From:</b> <a href="mailto:btl@fischerinternational.com" target="_parent">bleb1982</a><br>
<b>Sent:</b> Thursday, January 23, 2014 1:06 PM<br>
<b>To:</b> <a href="mailto:users@shibboleth.net" target="_parent">Shib Users</a></font></div>
<div><br>
</div>
<div dir="">
<div class="PlainText">I found this information on the confluence website. My question is. Does each<br>
client have to set the MSISIPSelectionPersistent cookie, or can this be set<br>
automatically for all users in ADFS?<br>
<br>
When landing on the ADFS, user will be presented with an option to<br>
authenticate with AD or Shibboleth. To automatically select Shibboleth over<br>
AD, we insert a cookie "MSISIPSelectionPersistent" with a Base64 value of<br>
the EntityID for the Shibboleth IdP:<br>
e.g. echo -n<span class="Apple-converted-space"> </span><a href="https://idp.example.com/idp/shibboleth" target="_parent">https://idp.example.com/idp/shibboleth</a><span class="Apple-converted-space"> </span>| base64<br>
aHR0cHM6Ly9pZHAuZXhhbXBsZS5jb20vaWRwL3NoaWJib2xldGg=<br>
<br>
<br>
<br>
--<br>
View this message in context:<span class="Apple-converted-space"> </span><a href="http://shibboleth.1660669.n2.nabble.com/ADFS-and-Shibboleth-Using-MSISIPSelectionPersistent-tp7594227.html" target="_parent">http://shibboleth.1660669.n2.nabble.com/ADFS-and-Shibboleth-Using-MSISIPSelectionPersistent-tp7594227.html</a><br>
Sent from the Shibboleth - Users mailing list archive at<span class="Apple-converted-space"> </span><a href="http://nabble.com/">Nabble.com</a>.<br>
--<br>
To unsubscribe from this list send an email to<span class="Apple-converted-space"> </span><a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div>
</div>
</div>
--<br>
To unsubscribe from this list send an email to<span class="Apple-converted-space"> </span><a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br>
<span style="font-size: 9.0pt; font-family: 'Calibri'; "><em><strong><br>Important Notice:</strong> The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone.<br><br>Deakin University does not warrant that this email and any attachments are error or virus free.</em></span></body>
</html>