<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>Hello,</div>
<div><br>
</div>
<div>I am working on switching a large application from our home brew legacy authentication system to Shibboleth. We are currently running a Shibboleth IdP version 2.x with plans to upgrade to IdP 3.x in the future. The Shibboleth IdP is using the JAAS Username/Password
handler (with Duo for second factor).</div>
<div><br>
</div>
<div>The legacy authentication system is designed to provide Kerberos TGS for specific services. The application uses those TGS values to authenticate with various other components such as our mainframe and some historical directory servers. I saw some references
to this 3-tier model back in 2008-2010 but nothing recent. </div>
<div><br>
</div>
<div>How are people addressing this need using SAML 2.0 with Shibboleth IdP 2.x? </div>
<div><br>
</div>
<div>Is this easier/possible with the recently released IdP 3.0? </div>
<div><br>
</div>
<div>Thanks,</div>
<div>David</div>
</div>
<div>
<div>
<div>-- </div>
<div>
<table style="margin: 0px 0px 1.4em; padding: 0px; border: none; outline: 0px; font-size: 1.2em; vertical-align: baseline; border-collapse: collapse; border-spacing: 0px; line-height: 18px; color: rgb(50, 50, 50); font-family: Helvetica, arial, verdana, sans-serif; min-width: 100%; background-color: rgb(255, 255, 255); background-position: initial initial; background-repeat: initial initial;">
<tbody style="margin: 0px; padding: 0px; border: 0px; outline: 0px; font-size: 12px; vertical-align: baseline; background: transparent;">
<tr style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; background-color: transparent; background-position: initial initial; background-repeat: initial initial;">
<td valign="top" style="margin: 0px; padding: 0px; border: none; outline: 0px; vertical-align: baseline; width: 121px; background-color: transparent; background-position: initial initial; background-repeat: initial initial;">
<img src="http://www.bu.edu/brand/files/2012/10/master-logo-small.gif" style="margin: 0px; padding: 38px 38px 38px 0px; border: 0px; outline: 0px; vertical-align: baseline; max-width: 550px; height: auto; background-color: transparent; background-position: initial initial; background-repeat: initial initial;"></td>
<td align="left" style="margin: 0px; padding: 34px 0px; border: none; outline: 0px; vertical-align: top; min-width: 100%; line-height: 16.799999237060547px; background-color: transparent; background-position: initial initial; background-repeat: initial initial;">
<span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; font-weight: 700; background-color: transparent; background-position: initial initial; background-repeat: initial initial;">David King</span> | Senior Technical Architect,
Information Services & Technology<br>
111 Cummington Mall | Boston University | Boston, Massachusetts 02215<br>
617.353.8250 | dsmk@bu.edu<br>
<span style="margin: 0px; padding: 0px; border: 0px; outline: 0px; vertical-align: baseline; font-weight: 700; background-color: transparent; background-position: initial initial; background-repeat: initial initial;">Listen. Learn. Lead.</span></td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</body>
</html>