Questions tagged [shibboleth]

A standards based, open source software package for web single sign-on across or within organizational boundaries.

The Shibboleth software implements widely used federated identity standards, principally OASIS' Security Assertion Markup Language (SAML), to provide a federated single sign-on and attribute exchange framework.

Shibboleth also provides extended privacy functionality allowing the browser user and their home site to control the attributes released to each application.

Using Shibboleth-enabled access simplifies management of identity and permissions for organizations supporting users and applications.

Shibboleth is developed in an open and participatory environment, is freely available, and is released under the Apache Software License.

559 questions
10
votes
3 answers

Integrating iPhone Application with Shibboleth

Has anyone integrated an iPhone application with a Shibboleth Identity Provider? Googling did not come up with anything so I am asking the gurus directly. If it has not been previously dones, is it feasible to do so?
user353829
  • 1,244
  • 5
  • 25
  • 38
10
votes
3 answers

Shibboleth - How to read attributes?

I'm successfully logging into my Service Provider test page with Shibboleth. I then go to the /Shibboleth.sso/Session page and I see the following: Attributes affiliation: 1 value(s) entitlement: 1 value(s) eppn: 1 value(s) persistent-id: 1…
Adam Levitt
  • 10,316
  • 26
  • 84
  • 145
9
votes
5 answers

No MetadataProvider available - shibsp::ConfigurationException

I recently upgraded Shibboleth from versionShibboleth-sp-2.5.6.0-win64 to Shibboleth-sp-2.6.0.0-win64 and Apache web server from 2.4.16 to 2.4.23. Post the upgrade, when I try to access my application I get the following…
Pooja Ambre
  • 129
  • 1
  • 1
  • 6
9
votes
2 answers

How do I talk to ADFS from Java?

We have a website running on Caucho Resin. It's written primarily in Java using JSP. We have our own custom authentication on the site. (We're not using any third party authentication frameworks.) We would now like to support federation using SAML.…
casolorz
  • 8,486
  • 19
  • 93
  • 200
9
votes
0 answers

Forcing xml.etree to output "unused" namespaces

I'm trying to create shibboleth configuration files using xml.etree in python, and I'm having problems with it omitting namespace assignments when it output the finished document. I'm pretty sure that it's the problem described in Outputting an…
uglycat5
  • 101
  • 5
9
votes
1 answer

passport-saml and SAML encryption

I'm new to passport and passport-saml, and I'm trying to build a Node.js server that uses our University's Shibboleth identity provider for single sign-on. I'm pretty close to getting it all working, but I'm hitting a snag during the /login/callback…
Dave Stearns
  • 585
  • 3
  • 6
  • 14
7
votes
4 answers

In order to implement SAML do I need Shibboleth SP installed on my host?

I got a couple of SAML implementation questions to clear up my confusion ... I need to implement SSO in a java web app. In order to do so, do I need Shibboleth SP installed on my host like so, or can I provide the SP functionality via OpenSAML? I…
mahatmanich
  • 10,791
  • 5
  • 63
  • 82
7
votes
2 answers

Shibboleth restful api

I am writing an android application for an University that uses Shibboleth for authenticating the students. Since I am making a android native app (not a webview), I would like to programmatically pass the username and password and get back the…
Sethu
  • 556
  • 1
  • 7
  • 18
7
votes
1 answer

Google (G Suit) Identity provider with nginx SAML2

You might heard about shibboleth and their great solutions as for Identity Provider (https://shibboleth.net/products/identity-provider.html) so is for Service Provider (e.g. nginx https://github.com/nginx-shib/nginx-http-shibboleth). It's known that…
nkamm
  • 627
  • 5
  • 14
7
votes
2 answers

Force Shibboleth to redirect to a specific URL after authentication

I'm trying to fulfill a requirement to always have a user be redirected to the same URL after being authenticated through Shibboleth. At the moment, it will redirect to the referrer (which can change) which we want to ignore and replace it with our…
TechFanDan
  • 3,329
  • 6
  • 46
  • 89
7
votes
4 answers

Deployment on Tomcat: Constraint violation when resolving method "org.slf4j.impl.StaticLoggerBinder.getLoggerFactory()Lorg/slf4j/ILoggerFactory;"

I'm deploying Shibboleth IdP 3.1.1 on Tomcat 8.0.22, but I receive this error: SEVERE [http-nio-8080-exec-13] org.apache.catalina.core.StandardContext.listenerStart Exception sending context initialized event to listener instance of class…
7
votes
2 answers

Should I require IdP's to sign SAML2 SSO responses?

Our app has SAML2 SSO integration with 3 different (Shibboleth) IdP's. We are trying to add a 4th (also Shibboleth), but running into some issues, because our app expects all SSO responses to be verifiably signed. These other 3 are signing their…
danludwig
  • 46,965
  • 25
  • 159
  • 237
6
votes
1 answer

shibboleth single sign on in java application server

I have tried reading the shibboleth wiki but was not able to understand how to integrate shibboleth single sign on in our spring based multiple web-apps. We need a database based authentication , so we should use jaas ? How would it work ? Can…
sunny
  • 824
  • 1
  • 14
  • 36
6
votes
0 answers

SAML/SSO Ajax requests between two SP's

My brain is about to explode from a lack of understanding of SSO/SAML. Im currently working on a project whereby we are implementing a SSO identity provider using shibboleth. We have SSO up and running and are able to authenticate via one app and…
Owen
  • 6,992
  • 7
  • 44
  • 77
6
votes
3 answers

SameSite attribute break SAML flow

Chrome 80 will introduce a new attribute which is SameSite. Strict - Only attach cookies for ‘same-site’ requests. Lax - Send cookies for ‘same-site’ requests, along with ‘cross-site’ top level navigations using safe HTTP methods e.g. (GET HEAD…
truongnm
  • 2,311
  • 2
  • 31
  • 48
1
2
3
37 38