<div dir="ltr">Hi,<div><br></div><div>I can write such plugin for you which allows your IdP to authenticate 3 pieces of data provided by the user.</div><div><br></div><div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><b><span style="font-size:8pt;font-family:tahoma,sans-serif;color:black">Victor Näslund</span></b><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-size:7.5pt;font-family:tahoma,sans-serif;color:black">Linux and <span class="gmail-m_5720248437198675047gmail-m_4070837037059773900gmail-m_-7804727173741449856gmail-il"><span class="gmail-m_5720248437198675047gmail-m_4070837037059773900gmail-il"><span class="gmail-m_5720248437198675047gmail-il"><span class="gmail-il">Identity</span></span></span></span> <span class="gmail-m_5720248437198675047gmail-m_4070837037059773900gmail-m_-7804727173741449856gmail-il"><span class="gmail-m_5720248437198675047gmail-m_4070837037059773900gmail-il"><span class="gmail-m_5720248437198675047gmail-il"><span class="gmail-il">management</span></span></span></span> </span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-family:tahoma,sans-serif;color:black"> </span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><b><span style="font-size:8pt;font-family:tahoma,sans-serif;color:black">SMHI</span></b><span style="font-size:8pt;font-family:tahoma,sans-serif;color:black"> / <b>Swedish Meteorological and Hydrological Institute</b></span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-size:7pt;font-family:tahoma,sans-serif;color:black">ITi – IT Infrastructure</span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-size:7.5pt;font-family:tahoma,sans-serif;color:black">SE - 601 76 NORRKÖPING</span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-size:7.5pt;font-family:tahoma,sans-serif;color:black"><a href="http://www.smhi.se/" target="_blank">www.smhi.se</a></span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-family:tahoma,sans-serif;color:black"> </span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-size:7.5pt;font-family:tahoma,sans-serif;color:black">E-post / Email: <a href="mailto:victor.naslund@smhi.se" target="_blank">victor.naslund@smhi.se</a></span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-size:7.5pt;font-family:tahoma,sans-serif;color:black">Tel vx/ Phone: <a href="tel:%2B46%20%280%2911%20495%2080%2000" target="_blank">+46 (0)11 495 80 00</a></span><u></u><u></u></p></div><div style="font-size:12.8px;color:rgb(80,0,80)"><p class="MsoNormal"><span style="font-size:7.5pt;font-family:tahoma,sans-serif;color:black">Direct Phone: <a href="tel:%2B46%20%280%2911%20495%2082%2046" target="_blank">+46 (0)11 495 82 46</a></span><u></u><u></u></p></div><p class="MsoNormal" style="font-size:12.8px;color:rgb(80,0,80)"><span style="font-size:7.5pt;font-family:tahoma,sans-serif;color:black">Besöksadress / Street address: Folkborgsvägen 17</span></p></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Nov 17, 2016 at 7:36 PM, Charlton Rose <span dir="ltr"><<a href="mailto:charltonrose@workfront.com" target="_blank">charltonrose@workfront.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:10pt" id="m_-4669257855815221808gmail-docs-internal-guid-9bf26ec8-7393-92f5-337d-54ff219cc7bb"><span style="font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">My company has a multi-tenant SaaS app that requires three pieces of information to sign in a user:</span></p><ul style="margin-top:0pt;margin-bottom:0pt"><li dir="ltr" style="list-style-type:disc;font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">company</span></p></li><li dir="ltr" style="list-style-type:disc;font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:0pt"><span style="font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">user name</span></p></li><li dir="ltr" style="list-style-type:disc;font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline"><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:10pt"><span style="font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">password</span></p></li></ul><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:10pt"><span style="font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">User names need only be unique within a company.  In most scenarios, we'll be able to implicitly identify the company when the user comes to our service through a vanity subdomain.</span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:10pt"><span style="font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">For some companies, we need to store the users’ credentials on our own servers.  For other companies, we need to defer to their own SSO providers for authentication.  I understand that Shibboleth excels at federated arrangements like this, so I'm not too concerned about that part in particular.</span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:10pt"><span style="font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">What I wish to know better, however, is how well Shibboleth can be adapted to provide authentication support for a multi-tenant application like ours, where 3 pieces of data (company, user name, password) are required to authenticate the user.  We also need to support company-specific password policies.</span></p><p dir="ltr" style="line-height:1.38;margin-top:0pt;margin-bottom:10pt"><span style="font-size:14.6667px;font-family:arial;color:rgb(0,0,0);background-color:transparent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">So my main question is, will Shibboleth be able to support this requirement?  Has anyone had experience using Shibboleth in this manner?</span></p></div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br></blockquote></div><br></div></div>