<html>
<head>
<meta name="generator" content="Windows Mail 17.5.9600.20498">
<style data-externalstyle="true"><!--
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph {
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
}
p.MsoNormal, li.MsoNormal, div.MsoNormal {
margin:0in;
margin-bottom:.0001pt;
}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst,
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle,
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast {
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
line-height:115%;
}
--></style></head>
<body dir="ltr">
<div data-externalstyle="false" dir="ltr" style="font-family: 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif';font-size:12pt;"><div>This AWS feature appears to have a dependency on a Microsoft WIF extension for SAML2 which is no longer downloadable from the Microsoft Connect site.</div><div><br></div><div><a href="http://blogs.msdn.com/b/card/archive/2011/05/16/announcing-the-wif-extension-for-saml-2-0-protocol-community-technology-preview.aspx" target="_parent">http://blogs.msdn.com/b/card/archive/2011/05/16/announcing-the-wif-extension-for-saml-2-0-protocol-community-technology-preview.aspx</a></div><div><br></div><div><br>Randy<br></div><div style="padding-top: 5px; border-top-color: rgb(229, 229, 229); border-top-width: 1px; border-top-style: solid;"><div><font face=" 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif'" style='line-height: 15pt; letter-spacing: 0.02em; font-family: "Calibri", "Segoe UI", "Meiryo", "Microsoft YaHei UI", "Microsoft JhengHei UI", "Malgun Gothic", "sans-serif"; font-size: 12pt;'><b>From:</b> <a href="mailto:liamr@umich.edu" target="_parent">Liam Hoekenga</a><br><b>Sent:</b> Wednesday, July 2, 2014 4:00 PM<br><b>To:</b> <a href="mailto:users@shibboleth.net" target="_parent">Shib Users</a></font></div></div><div><br></div><div dir=""><div dir="ltr">Is anyone doing it with a "federated proxy" (i.e. <a href="http://aws.amazon.com/code/8383453795065208" target="_parent">http://aws.amazon.com/code/8383453795065208</a> )<div>It's not clear to me what advantage this proxy provides..</div>
<div><br></div><div>Liam</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Jul 2, 2014 at 1:47 PM, Jim Fox <span dir="ltr"><<a href="mailto:fox@washington.edu" target="_parent">fox@washington.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; border-left-color: rgb(204, 204, 204); border-left-width: 1px; border-left-style: solid;"><div class="HOEnZb"><div class="h5"><br>
<blockquote class="gmail_quote" style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; border-left-color: rgb(204, 204, 204); border-left-width: 1px; border-left-style: solid;">
I’ve been asked whether our IdP can readily support AWS logins as outlined<br>
in:<a href="http://docs.aws.amazon.com/STS/latest/UsingSTS/STSMgmtConsole-SAML.html" target="_parent">http://docs.aws.amazon.com/<u></u>STS/latest/UsingSTS/<u></u>STSMgmtConsole-SAML.html</a> and<br>
<a href="http://blogs.aws.amazon.com/security/post/TxRTTT5PLUE6B5/How-to-use-Shibboleth-for-single-sign-on-to-the-AWS-Management-Console" target="_parent">http://blogs.aws.amazon.com/<u></u>security/post/TxRTTT5PLUE6B5/<u></u>How-to-use-Shibboleth-for-<u></u>single-sign-on-to-the-AWS-<u></u>Management-Console</a><br>
<br>
A quick read gave me the impression it should almost straightforward, but I would appreciate hearing from other institutions with generic<br>
Shibboleth IdP (i.e., not hosted at AWS) that have succeeded (or failed!) providing institutional authN/attributes to AWS service via<br>
institutional IdP.<br>
<br>
</blockquote>
<br></div></div>
I did this a month or so ago. It worked as advertised.<span class="HOEnZb"><font color="#888888"><br>
<br>
Jim</font></span><br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_parent">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div>
</div></div>
</body>
</html>