<div dir="ltr">thank you Peter for the help</div><div class="gmail_extra"><br><div class="gmail_quote">2015-01-20 12:50 GMT+00:00 Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* samir el otmani <<a href="mailto:elotmani.samir@gmail.com">elotmani.samir@gmail.com</a>> [2015-01-20 13:21]:<br>
<span class="">> i want to use lazy sessions to secure an application , so that the session<br>
> management will be in the application , do you have any example to do that<br>
> , and what is the security to use a passive protection.<br>
<br>
</span>I'm assuming you've read this?<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPProtectContent" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPProtectContent</a><br>
<br>
For lazy sessions you set<br>
authType shibboleth<br>
require shibboleth<br>
<br>
Which means the webserver will not enforce protection when someone<br>
access your resources. You (i.e., your code or application) then is in<br>
charge of intercepting such requests and initiating a session of your<br>
own (application session), and in the process of doing that also<br>
initiating a Shiboleth SP session, cf.<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessionInitiator" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessionInitiator</a><br>
<br>
Whenever you want a client to initate an SP session you'll send them a<br>
redirect (HTTP Location header) which points to the SP's Login<br>
handler. E.g. /Shibboleth.sso/Login<br>
You can also supply additional parameters, e.g. if you alraady know<br>
the IDP to use: /Shibboleth.sso/Login?entityID=<urlencoded-idp-entity-id><br>
<span class="HOEnZb"><font color="#888888">-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><i><font color="#0b5394" face="verdana, sans-serif"><b>EL OTMANI Samir</b></font></i><div><i><font color="#0b5394" face="verdana, sans-serif"><b>Ingénieur d'Etat en Génie Informatique </b></font></i></div><div><i><font color="#0b5394" face="verdana, sans-serif"><b>Tel:+212 699 041 864</b></font></i></div></div></div>
</div>