<div dir="ltr">Thanks Peter for the valuable inputs. I will try the configuration you mentioned in the above link. </div><div id="DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br>

<table style="border-top:1px solid #d3d4de">

        <tr>

        <td style="width:55px;padding-top:13px"><a href="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank" rel="nofollow" link="external"><img src="https://ipmcdn.avast.com/images/icons/icon-envelope-tick-green-avg-v1.png" width="46" height="29" style="width: 46px; height: 29px;"></a></td>

                <td style="width:470px;padding-top:12px;color:#41424e;font-size:13px;font-family:Arial,Helvetica,sans-serif;line-height:18px">Virus-free. <a href="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank" style="color:#4453ea" rel="nofollow" link="external">www.avg.com</a>

                </td>

        </tr>

</table><a href="#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width="1" height="1" target="_top" rel="nofollow" link="external"></a></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 19, 2017 at 6:54 PM, Peter Schober [via Shibboleth] <span dir="ltr"><<a href="/user/SendEmail.jtp?type=node&node=7632692&i=0" target="_top" rel="nofollow" link="external">[hidden email]</a>></span> wrote:<br><blockquote style='border-left:2px solid #CCCCCC;padding:0 1em' class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

        * srikar <<a href="http:///user/SendEmail.jtp?type=node&node=7632687&i=0" rel="nofollow" link="external" target="_blank">[hidden email]</a>> [2017-04-19 08:43]:

<span class="im HOEnZb"><div class="m_-2217263132359504254shrinkable-quote"><div class='shrinkable-quote'><br>> <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/WebDAV" rel="nofollow" link="external" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/display/SHIB2/<wbr>WebDAV</a><br>> 

<br>>  I am trying to understand the configuration present in the above

<br>> link.  Please excuse me if I am asking wrong questions, since I am a

<br>> novice in this. I have the following

<br>> questions:

<br>> 

<br>> 1)"IDP must support artifact binding", does that mean we are overriding the

<br>> authentication IDP provides and 

<br>> WebDav server which is present on IDP system will handle artifact

> resolution(I mean authentication)?

</div></div><span class="im HOEnZb">I don't understand what you're asking, but no.

The WebDAV servers is and remains the WebDAV server.

The IDP remains the IDP and authenticates subjects.

The SP protects the WebDAV server.

<br><br>The only thing that changes is using a different protocol binding

<br>(technical term from the SAML specification, how SAML protocol

<br>messages are mapped to transport protocols or methods), i.e.,

<br>HTTP-Artifact instead of e.g. HTTP-Redirect (for requests) or

HTTP-POST (for responses).

<br><br></span><span class="im HOEnZb">> <SessionInitiator type="SAML2" id="WebDAVLogin" Location="/WebDAVLogin"

<br>>     entityID="<a href="https://idp.example.org/idp/shibboleth" rel="nofollow" link="external" target="_blank">https://idp.example.<wbr>org/idp/shibboleth</a>"

<br>>     acsIndex="6" <!-- urn:oasis:names:tc:SAML:2.0:<wbr>bindings:HTTP-Artifact -->

<br>>     template="bindingTemplate.<wbr>html"

<br>>     outgoingBindings="urn:oasis:<wbr>names:tc:SAML:2.0:bindings:<wbr>HTTP-Redirect"

<br>>     authnContextClassRef="<a href="https://example.org/authenticationContext/myclass" rel="nofollow" link="external" target="_blank">https://<wbr>example.org/<wbr>authenticationContext/myclass</a>"

<br>> />

<br>> what does authnContextClassRef do? What should be the link for 

<br>> authnContextClassRef?

<span class="im HOEnZb">The above isn't even well-formed XML (i.e., it's invalid).

<br>Seems I myself broke that example back in 2011 (!) and it's been

<br>broken ever since:

<a href="https://wiki.shibboleth.net/confluence/pages/diffpages.action?originalId=6194493&pageId=8324040" rel="nofollow" link="external" target="_blank">https://wiki.shibboleth.net/confluence/pages/diffpages.action?originalId=6194493&pageId=8324040</a> To be honest I have no idea what this should have been.

<br><br>Anyway as to your question: The documentation seems to suggest to

<br>configure the SP to request a certain authentication class context

<br>from the IDP (you make this any URI you control, it doesn't have to

<br>resolve as a URL), so that the IDP can be configured to trigger HTTP

Basic Auth for this request.

<br>Why is that necessary? Because the HTTP library built into the WebDAV

<br>client won't be able to fill in credentials into an HTML form, so

<br>forms-based authentication at the IDP must be avoided for such

<br>requests (and likely only for such requests), hence using the

<br>authentication class context to signal to the IDP "please use HTTP

Basic Auth for this".

<br><br></span><span class="im HOEnZb">> 3)Does  WebDav resource has to be on SP while WebDav server is on IDP? 

<br><br></span><div class="HOEnZb"><div class="h5">I don't know what a WebDAV resource is but all the files you want to

<br>access via WebDAV will need to reside on the WebDAV server, which in

<br>this case needs to be the Apache httpd webserver, with the Shib SP and

mod_dav modules enabled and configured.

<br>I.e., the webserver is the webdav server and that server hosts the

files/resources you want to access using a webdav client.

<br><br>The SAML IDP is just a SAML IDP. It recieves SAML protocol requests

<br>and may return SAML protocol responses. That's all, and not specific

to the WebDAV hack described there.

<br><br>-peter

<br></div></div><span class="HOEnZb"><font color="#888888">-- 

<br>To unsubscribe from this list send an email to <a href="http:///user/SendEmail.jtp?type=node&node=7632687&i=1" rel="nofollow" link="external" target="_blank">[hidden email]</a>

<br>

        <br>

        <br>

        <hr noshade size="1" color="#cccccc">

        <div style="color:#444;font:12px tahoma,geneva,helvetica,arial,sans-serif">

                <div style="font-weight:bold">If you reply to this email, your message will be added to the discussion below:</div>

                <a href="http://shibboleth.1660669.n2.nabble.com/WebDav-with-Shibboleth-tp7632684p7632687.html" target="_blank" rel="nofollow" link="external">http://shibboleth.1660669.n2.<wbr>nabble.com/WebDav-with-<wbr>Shibboleth-tp7632684p7632687.<wbr>html</a>

        </div>

        <div style="color:#666;font:11px tahoma,geneva,helvetica,arial,sans-serif;margin-top:.4em;line-height:1.5em">

                To unsubscribe from WebDav with Shibboleth, <a href="" target="_blank" rel="nofollow" link="external">click here</a>.<br>

                <a href="http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml" rel="nofollow" style="font:9px serif" target="_blank" link="external">NAML</a>

        </div></font></span></blockquote></div><br></div>

<br/><hr align="left" width="300" />

View this message in context: <a href="http://shibboleth.1660669.n2.nabble.com/WebDav-with-Shibboleth-tp7632684p7632692.html">Re: WebDav with Shibboleth</a><br/>

Sent from the <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html">Shibboleth - Users mailing list archive</a> at Nabble.com.<br/>