I have working setup of shibboleth configured via httpd apache and then pass it on to tomcat. Now is it possible to get rid of httpd portion alone and have tomcat handle shibboleth authentication by way of using the shibboleth daemon.
Asked
Active
Viewed 1,218 times
1
-
1Are you talking about a shibboleth service provider, or an identity provider? – Richard Salts Nov 21 '13 at 00:20
-
1I am talking about shibboleth service provider. – bagavadhar Nov 21 '13 at 15:36
1 Answers
1
It looks like the shibboleth SP code is only written in C++ at the moment, with the apache module, an IIS module and NSAPI module acting as an interface to the shibd. Any way you look at it seems like you would need to implement a fair chunk of the existing code in java as I could find no existing libraries that do this job specifically. There is an opensaml-java library, but it's a little lower level than providing a java-based shibboleth SP.
Richard Salts
- 755
- 3
- 17
-
Since this answer is quite old, I double checked this (2017), and it still holds true, as explained here in the Shibboleth documentation: https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPJavaInstall – Wouter Apr 26 '17 at 09:14