Tag Info

New answers tagged

1

You simply state "site 2 checks if the page that is redirected from is really site 1"... how? There isn't a good way to do this without further information that site 1 can use to verify it's identity via a challenge from Site 2. This also seems overly complex for passing an authentication. All that really needs to be done, as long as Site 1 and Site 2 ...


2

CAS just performs authentication. Authorization is up to the service provider. With older versions of CAS, you could use the SAML validate endpoint to get attributes from CAS. With the new jasig-CAS 4.0 server, you can get attributes from the CAS 3.0 protocol. This still means authorization is up to the service, but the service is able to request ...


0

The easiest way I think is to identify a single identity provider (authentication/authorization) as the "Authoritative Source". This will store all of your identity information across all of your applications and services. This will provide the master record by which you would be able to provide authentication and authorization for any and all users. This ...


0

The problem was different. Was used incorrect keystore. Now everything is OK. Initially, I assumed that entityID attribute must refer to a domain name, which specified in attributes Location. However, it is not. It just must be unique and it is better to use domain name for that. UnderstandingShibboleth, EntityNaming: Shibboleth identity and service ...



Top 50 recent answers are included