<div dir="ltr"><div>Hi!</div><div><br></div><div>Standard flow (login page hosted on IdP side):</div><div>GET <a href="https://www.localhost.com/private_page_url">https://www.localhost.com/private_page_url</a> (user try to access private web site page)</div>
<div>GET <a href="https://www.localhostsso.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=">https://www.localhostsso.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=</a><samlReq>&RelayState=ss:mm:<hash> (I believe this create session on IdP side)</div>
<div>GET <a href="https://www.localhostsso.com/idp/AuthnEngine">https://www.localhostsso.com/idp/AuthnEngine</a></div><div>GET <a href="https://www.localhostsso.com/idp/login_page.jsp?actionUrl=%2Fidp%2Fj_security_check">https://www.localhostsso.com/idp/login_page.jsp?actionUrl=%2Fidp%2Fj_security_check</a> (display login page)</div>
<div>when user submit this login page (provide user/password):</div><div>POST <a href="https://www.localhostsso.com/idp/j_security_check">https://www.localhostsso.com/idp/j_security_check</a></div><div>GET <a href="https://www.localhostsso.com/idp/profile/SAML2/Redirect/SSO">https://www.localhostsso.com/idp/profile/SAML2/Redirect/SSO</a><br>
</div><div>POST <a href="https://www.localhost.com/Shibboleth.sso/SAML2/POST">https://www.localhost.com/Shibboleth.sso/SAML2/POST</a> (response to SP, contains SAMLResponse & RelayState)<br></div><div>GET <a href="https://www.localhost.com/private_page_url">https://www.localhost.com/private_page_url</a> (access private page)<br>
</div><div><br></div><div>I cannot POST data (user/password) - from embedded login box in <a href="http://www.localhost.com">www.localhost.com</a> to: <a href="https://www.localhostsso.com/idp/j_security_check">https://www.localhostsso.com/idp/j_security_check</a> (because it will be middle of the flow - there will be no session on IdP side and I'v got error: No login context available, unable to return to authentication engine</div>
<div>I also cannot prepare SAMLRequest: GET <a href="https://www.localhostsso.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=">https://www.localhostsso.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=</a><samlReq>&RelayState=ss:mm:<hash></div>
<div>because I don't know how to incorporate in it user/password to prevent default behaviour -> display login page on IdP side instead user should be autmatically logged in.</div><div><br></div><div>Best Regards</div>
<div>Pawel</div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-05-06 9:19 GMT+02:00 Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">* Paweł Pogoda <<a href="mailto:paw.pogoda@gmail.com">paw.pogoda@gmail.com</a>> [2014-05-06 09:13]:<br>
<div class="">> What I want to achieve is embed two separate login box in protected<br>
> web sites - login process (setting user/password) should be started<br>
> on protected web sites and then data should be submitted to IdP. Is<br>
> it possible?<br>
<br>
</div>Look at what your webbrowser does (so yes, it is possible).<br>
<br>
Some consider this phishing (as the subject is being mislead about<br>
where they're sending their credentials to), most consider this bad<br>
practice.<br>
-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></blockquote></div><br></div></div>