Shibboleth Developers

["Scott Cantor" <>]

> Can you explain how we could use ID-WSF SSOS with an ECP browser plugin?

The SSOS ECP is just SAML ECP with the SOAP part implemented by the ID-WSF
SOAP binding.

You'd have to implement a subset of an ID-WSF client that supported some set
of ID-WSF security mechanisms, or an extended mechanism to represent
something that's not already in the WSF secmech list, like the WS-Sec
Username/Password token profile.

The "authentication" to the IdP is done with ID-WSF, and the rest is the
same. In Liberty parlance, the plugin is a LUAD, I think, a device that's
able to speak the WSF SOAP binding.

-- Scott