Shibboleth Developers

[Chad La Joie <>]

On 12/31/10 4:50 PM, Peter Schober wrote:
> I failed to embed the Shib EDS into a page. I could only let it live
> on some other page on the same vhost to where a HTTP redirect takes
> place.
> The SWITCH DS lives "inside" an unprotected page, OTOH.
> Is this not correct?

No, the EDS is supposed to be able to be dropped in to any page as long 
as it's on the same host as the SP (because of the browser's same-origin 
security policies).
--
Chad La Joie
http://itumi.biz
trusted identities, delivered