shibboleth

How do I talk to ADFS from Java? [closed]

纵饮孤独 提交于 2019-11-30 07:25:39
We have a website running on Caucho Resin. The great majority of the site is JSP/Java. We have our own custom authentication on the site, meaning we aren't using any third party authentication frameworks. We host the website, not our clients. Our large clients want to have their users log into our site with their active directory credentials. For this I'm assuming I will be talking to ADFS with SAML, please correct me if that is wrong. So my question is how do I go about doing that with Java? from what I can tell there is OpenSAML which sounds like it doesn't do everything, and if I want more

Integrating iPhone Application with Shibboleth

风流意气都作罢 提交于 2019-11-30 02:24:22
Has anyone integrated an iPhone application with a Shibboleth Identity Provider? Googling did not come up with anything so I am asking the gurus directly. If it has not been previously dones, is it feasible to do so? EC_Johnson2000 The answer to both is "Yes." I'm a Java guy, so being asked two weeks ago to: Learn Objective-C Write an native iPhone App Authenticated programmatically with Shibboleth Download an display Shibboleth protected datafile ...Was a little daunting. Compound that with the absence of any forum posts to help out has prompted me to share my experience. Here's an overview

How do I talk to ADFS from Java? [closed]

心已入冬 提交于 2019-11-29 09:30:50
问题 Closed . This question needs to be more focused. It is not currently accepting answers. Want to improve this question? Update the question so it focuses on one problem only by editing this post. Closed 3 years ago . We have a website running on Caucho Resin. The great majority of the site is JSP/Java. We have our own custom authentication on the site, meaning we aren't using any third party authentication frameworks. We host the website, not our clients. Our large clients want to have their

How to implement or integrate single sign on with SAML and Shibboleth

孤街浪徒 提交于 2019-11-29 07:41:55
问题 We have two separate products, both including web app and server. We want to implement Single Sign On for both of them, so when a user has logged into one product, he can automatically access resources in the other product belonging to him. I have explored a little bit and find SAML is a good approach that we can take, but we are not sure how we want to proceed. Is it a good idea to implement our own Service Provider? I have looked at Shib SP, but looks like if I want to integrate it into my

asp.net MVC authentication with Shibboleth

∥☆過路亽.° 提交于 2019-11-29 01:14:54
问题 Shibboleth is a SSO Authentication that is added to IIS as a "plugin". After a user has done a Login there are Headers showing the Shibboleth Session: ShibSessionID ShibIdentityProvider eppn affiliation entitlement unscopedaffiliation ...more So i can extract username and roles from the Headers. so far so fine. Question: How can I implement a handler that does read the headers and set the status that a user is authorized? Idea is to use the [Authorize] Attribute and the Method Roles

Single Sign On for a Web App

廉价感情. 提交于 2019-11-28 23:17:08
I have been trying to understand how this problem is solved for over a month now. I really need to come up with a general approach that work. I have a theory, but I'm just not sure it's the easiest (or correct) approach and I haven't been able to find any information to support my ideas. Here's the scenario: 1) You have a complex web application that offers secure content on a subscription basis. 2) Users are required to log in to your application with user name and password. 3) You sell to large corporations, which already have a corporate authentication technology (for example, Active

Any java application for Shibboleth Authentication?

折月煮酒 提交于 2019-11-28 08:59:55
问题 I want to use shibboleth authentication for my web application. Is there any sample java application which tell how to use shibboleth authentication step by step. I have installed shibboleth but still didn't get idea how to use it. 回答1: I assume you have to use Service Provider Use testshib to test your app in an easy way. Follow the steps download and instal sp on your machine include shibboleth's configuration into your apache 2.1. into httpd.conf file add include "PATH/opt/path/etc

Single Sign-On in Spring by using SAML Extension and Shibboleth

会有一股神秘感。 提交于 2019-11-28 05:00:49
I'd like to implement a Single Sign-on (SSO) authentication layer in my Spring-based application with the aim of supporting authentication and authorization from different security domains. I've chosen Shibboleth as IdP, but I have yet to identify what I will use for the SP. The choices are: Spring Security SAML Extension: component enables both new and existing applications to act as a Service Provider in federations based on SAML 2.0 protocol and enable Web Single Sign-On. Spring Security Extension allows seamless combination of SAML 2.0 and other authentication and federation mechanisms in

Logging into SAML/Shibboleth authenticated server using python

本秂侑毒 提交于 2019-11-28 04:00:52
I'm trying to login my university's server via python, but I'm entirely unsure of how to go about generating the appropriate HTTP POSTs, creating the keys and certificates, and other parts of the process I may be unfamiliar with that are required to comply with the SAML spec. I can login with my browser just fine, but I'd like to be able to login and access other contents within the server using python. For reference, here is the site I've tried logging in by using mechanize (selecting the form, populating the fields, clicking the submit button control via mechanize.Broswer.submit(), etc.) to

Setting up a new Shibboleth IdP to work with an existing SAML SP

早过忘川 提交于 2019-11-27 16:17:35
Hopefully this isn't a duplicate or too broad. I just have a feeling I need a bit more information than anything else I've been able to find. I have a program/server that already has a functioning SAML SP built in to it. I'm trying to get it connected to a test Shibboleth IdP (V3.3.3) on an internal server running Windows Server. I have it installed and connected to our Active Directory users. The documentation was great for getting to that point. Now I have no earthly clue how to proceed. I see a lot of information about exchanging configuration/XML info and certificates between SPs and IdPs.