<div dir="ltr">I don't think its possible to get your password out of AD. Oracle had similar issues with its use of LDAP to authenticate to databases since it needs the decrypted password and they ended up having to create a second attribute that stores the password in an additional attribute so the database could access it.</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Mar 18, 2015 at 2:40 PM, Patrick Le <span dir="ltr"><<a href="mailto:ple@jhmi.edu" target="_blank">ple@jhmi.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">I know this doesn’t conform to SAML Specs/security, but does anyone know if there is a way to enumerate a user’s AD password into a SAML attribute response? We’re trying to integrate SSO into VmWare View. Aside from Horizon Workspace, there’s
no built in SAML authentication support within View. We have the environment behind F5 and are trying to figure out a way to manipulate a SAML login into providing VmWare with the user information it needs. Ideally we would want the password to come in through
the SAML assertion so it’s properly signed/encrypted/etc as opposed to a separate post from our login page to another webpage not protected by Shibboleth. <u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thanks<span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></p><span class="HOEnZb"><font color="#888888">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Patrick <u></u><u></u></p>
</font></span></div>
</div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div>