Shibboleth Developers

[Manuel Sánchez Cuenca <>]

Tom Scavo wrote:

> On 12/15/05, Manuel Sánchez Cuenca 
> <>
>  wrote:
>  
>
> > I want to make some tests with
> > the identity provider. I'm interested in make an authentication request
> > to the Identity Provider from my own java program, not from the Service
> > Provider. Is it possible?
> >    
>
> Well, a Shibboleth Authentication Request is just a GET request so you
> don't need a lot of high-powered machinery.
>
>  
>
> > How?
> >    
>
> Not sure I understand...you want to intercept the Response at the SP? 
> If so, fiddle with the Assertion Consumer Service component of the
> Java SP.
>
>  
>
> > What is the Identity Provider servlet
> > which have to receive this authentication request?
> >    
>
> See 
> http://anoncvs.internet2.edu/cgi-bin/viewcvs.cgi/shibboleth/java/src/edu/internet2/middleware/shibboleth/idp/provider/ShibbolethV1SSOHandler.java
>
> Hope this helps,
> Tom
>
>
>  
Can you tell me if the following is correct?

I have the IdP in "https://casillas.dif.um.es/shibboleth-idp";, so I 
write in the browser 
"https://casillas.dif.um.es/shibboleth-idp/SSO?target=<target>&shire=http://casillas.dif.um.es/myshire";. 


Taking into account this URL, I understand that the target is the final 
resource I want to access (although I don't know why it is needed in the 
authentication request) and the shire is an HTTP service to which the 
AuthenticationStatement will be sent. This service must then access the 
AA to get the user's attributes and perform the authorization tasks to 
decide if the user finally can access to the target.

--
=======================================================
Manuel Sanchez Cuenca
Dept. Ingenieria de la Informacion y las Comunicaciones
Universidad de Murcia - España
Tlf: +34 968364644 - Fax: 968364151
email: 

www: http://livia.dif.um.es/~lolo
www: http://livia.dif.um.es/~irisgrid