Menu
▾
▴
Re: [Asimba-users] asimba SAML Proxy as a SAML Service Provider
|
From: Mohamed El H. <Moh...@ad...> - 2015-02-27 15:13:17
|
Ok, thank you very much for your answer Mohamed -----Original Message----- From: Mark Dobrinic [mailto:mdo...@co...] Sent: vendredi 27 février 2015 15:17 To: Mohamed El Hajj; asi...@li... Subject: Re: [Asimba-users] asimba SAML Proxy as a SAML Service Provider No, that is not possible. That would require some interceptor that creates the SAML requests. I'd advice you to try out Shibboleth for that exact purpose, because what you describe is the kind of problem that Shibboleth pretty much was designed for to solve. What *could* be interesting, is that you could configure a Shibboleth-instance to generate that AuthnRequest and send it to Asimba. Then, Asimba can pick it up and do the IDP discovery, SSO caching, etc, which would leave all the dynamics to be executed by Asimba, and Shibboleth can be configured really statically to just hook into Asimba. That could make sense. You follow my thinking here? But I seriously think that Shibboleth is a good first step to solve your problem. Cheers! Mark On 27/02/15 10:01, Mohamed El Hajj wrote: > No, in fact, i would like to test this behavior of asimba on a simple directory that I need to protect in an apache Web Server, with SAML authentication without using a Service provider (but using asimba instead). So my application doesn't send anything, it is just a directory. For example when using Shibboleth SP, the shib apache module generates the authnRequest, but in my case there is no shibd, it is just a directory that I need to protect with SAML authentication using asimba. So is that still possible? > > -----Original Message----- > From: Mark Dobrinic [mailto:mdo...@co...] > Sent: vendredi 27 février 2015 09:49 > To: Mohamed El Hajj; asi...@li... > Subject: Re: [Asimba-users] asimba SAML Proxy as a SAML Service > Provider > > Can your application send SAML AuthnRequests? > > On 27/02/15 09:47, Mohamed El Hajj wrote: >> Yes i would like to know how to configure asimba to act as a SAML Service provider for an application, could you give me an configuration example on that? >> >> Thank you very much >> >> -----Original Message----- >> From: Mark Dobrinic [mailto:mdo...@co...] >> Sent: jeudi 26 février 2015 18:36 >> To: Mohamed El Hajj; asi...@li... >> Subject: Re: [Asimba-users] asimba SAML Proxy as a SAML Service >> Provider >> >> Yes, that is perfectly possible, and Asimba is then fufilling the role of SAML SP. >> >> Would you want some assistence in setting up such a thing? >> >> Cheers! >> >> Mark >> >> On 26/02/15 18:25, Mohamed El Hajj wrote: >>> Mark, >>> >>> In my use case, the asimba proxy sends the Authentication Request and acts as SAML SP towards the SAML IDP. Can asimba proxy act as a SAML Service provider? >>> >>> Thanks >>> >>> >>> -----Original Message----- >>> From: Mark Dobrinic [mailto:mdo...@co...] >>> Sent: jeudi 26 février 2015 18:07 >>> To: Mohamed El Hajj; asi...@li... >>> Subject: Re: [Asimba-users] asimba SAML Proxy as a SAML Service >>> Provider >>> >>> Hi Mohamed, >>> >>> You can use Asimba as SAML Proxy for sure. >>> As an application send an AuthnRequest to Asimba, and Asimba will act as a SAML SP towards a Remote SAML IDP. >>> >>> Is that your usecase? >>> >>> Cheers! >>> >>> Mark >>> >>> >>> >>> On 26/02/15 17:42, Mohamed El Hajj wrote: >>>> Hi Mark, >>>> >>>> In fact i wanted to see if i could use asimba in SAML Proxy mode, >>>> instead of Shibboleth Service Provider, >>>> >>>> So is there a way to do this? >>>> >>>> >>>> -----Original Message----- >>>> From: Mark Dobrinic [mailto:mdo...@co...] >>>> Sent: jeudi 26 février 2015 17:37 >>>> To: Mohamed El Hajj; asi...@li... >>>> Subject: Re: [Asimba-users] asimba SAML Proxy as a SAML Service >>>> Provider >>>> >>>> Hi Mohamed, >>>> >>>> Asimba is primarily an Identity Provider, that has capabilities to relay an inbound authentication request to another SAML Identity Provider -- the SAML Proxy mode of Asimba. >>>> >>>> In this mode, Asimba performs the SAML Service Provider profile. >>>> >>>> If this is what you mean, then the answer is yes. >>>> >>>> If you are looking for a solution to integrate Asimba into your existing application, and Asimba should fulfill the SAML Service Provider role *towards your application*, then the answer is: there is no easy straight-forward way. You might be interested in taking a look at Shibboleth for that purpose. >>>> >>>> Did you get your question answered by this? >>>> >>>> Cheers! >>>> >>>> Mark >>>> >>>> >>>> >>>> >>>> On 26/02/15 17:17, Mohamed El Hajj wrote: >>>>> Hi, >>>>> >>>>> >>>>> >>>>> Can we use asimba SAML Proxy as a SAML Service Provider? >>>>> >>>>> >>>>> >>>>> Thank you >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> Mohamed EL HAJJ >>>>> >>>>> @ Moh...@ad... <mailto:Moh...@ad...> >>>>> >>>>> (01 46 83 30 91 >>>>> >>>>> http://www.aduneo.com <http://www.aduneo.com/> >>>>> >>>>> 3 rue Danton 92240 Malakoff >>>>> >>>>> cid:image001.png@01CBCEB8.58797410 >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> ------------------------------------------------------------------ >>>>> - >>>>> - >>>>> - >>>>> - >>>>> -------- Dive into the World of Parallel Programming The Go >>>>> Parallel Website, sponsored by Intel and developed in partnership >>>>> with Slashdot Media, is your hub for all things parallel software >>>>> development, from weekly thought leadership blogs to news, videos, >>>>> case studies, tutorials and more. Take a look and join the conversation now. >>>>> http://goparallel.sourceforge.net/ >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> Asimba-users mailing list >>>>> Asi...@li... >>>>> https://lists.sourceforge.net/lists/listinfo/asimba-users >>>>> >>>> >>> >> > |
