Grouper Users - Open Discussion List

[Chris Hyzer <>]

Can you explain in more detail?  You want to have GrouperWS and not use SSO?  Yes, we run Grouper WS with Kerberos service principal authentication which is one of the authentication plugins in the WS.  You can implement a Java method to do authn in the grouper-ws, or do a servlet filter, or apache authn, etc

 

https://spaces.internet2.edu/display/Grouper/Grouper+WS+Authentication

 

If you want SSO for WS in some cases, and different authn in other cases, you might need to deploy the WS at different URLs either by having separate webapps, or maybe by manipulating the web.xml and mapping the servlets to different URLs at the same time…

 

Thanks,

Chris

 

From: [mailto:] On Behalf Of Klug, Lawrence
Sent: Monday, October 15, 2012 11:35 AM
To:
Subject: [grouper-users] Grouper Admin Ui and Web Service

 

We have Grouper Admin Ui and Web Service running on load balanced servers with Shiiboleth SSO.  We would like to bypass the SSO for Web Service and allow an external application to authenticate to the Web Service based on  subject Group membership.  Is there built in support for this?

 

Thanks,

 

Lawrence