Integrating iPhone Application with Shibboleth

Question

Has anyone integrated an iPhone application with a Shibboleth Identity Provider? Googling did not come up with anything so I am asking the gurus directly.

If it has

Answer 1

I managed to do just that, but it took me some time to understand every step of the process and to reproduce it perfectly. If I have time, I might write a detailed tutorial, because I didn't find any help for a lot of problems I got. The thing is, it also depends on the website you want to connect to, so yours maybe does not follow the same path as mine (its process is the same as the one described here).

To see every request fired by my browser (Chrome) to connect, I used the developer tools Network panel, with 'Preserve log' checked.

A few hints :

• 1°) You need to get "_idp_authn_lc_key..." cookie. There's a request that set it for you, find it.

• 2°) You need the login ticket (LT-...). You'll probably find it in the body of the page that asks you your credentials.

• 3°) You need a service ticket (ST-...). Again, you will find it in the page that the previous request returned.

• 4°) You need SAMLResponse. Again, you will find it in the page that the previous request returned.

• 5°) Finally, you can log in by sending back SAMLResponse to the service provider. You should take care of the encoding, here. I had a few '+' or '=' that I needed to change to '%2B' and '%3D'. You will be given a "_idp_session" cookie, that will allow you to reconnect without all this mess.

If someone tries to do the same, I'd be happy to help ! Just send me a message.