Skip to Content.
Sympa Menu

shibboleth-dev - Re: User Authentication on the IDP?

Subject: Shibboleth Developers

List archive

Re: User Authentication on the IDP?


Chronological Thread 
  • From: Nate Klingenstein <>
  • To:
  • Subject: Re: User Authentication on the IDP?
  • Date: Thu, 31 Jan 2008 20:10:19 +0000
Oh. Recently, with "recent" measured in x.509 years, added:  SSLUserName SSL_CLIENT_S_DN_CN


Totally missed that in all my reading earlier.  Tomcat may have something similar that has been added in the time since Dartmouth felt it necessary to implement a filter itself.

I would still like to see the IdP handle client certificate authentication itself, if for no other reason than its intelligent integration with AuthnContext, to the extent AuthnContext is intelligent.

On 31 Jan 2008, at 20:00, Scott Cantor wrote:

I think it's pretty much the same, only the actual resource you need to

protect with REMOTE_USER has changed (and no, I don't know what that is, but

it would be the same as using CAS or pubcookie or whatever).



Archive powered by MHonArc 2.6.16.

Top of Page