The Shibboleth 2.0 SP Infocard plugin adds a session initiator and
assertion consumer service to support Information Card login.
Session Initiator
An infocard login is triggered by the submission of a form containing either an application/x-informationcard
object or an ic:informationCard
XHTML element. This form also identifies all attributes that are required or are optional. The plugin's configuration requires specification of a page template for this form. It can be set to auto-submit. For example:
...
- The initiator's
id
attribute
can be referenced by a.htaccess
orLocation
apache
configurationShibRequireSessionWith
directive to request infocard login.
Assertion Consumer Service
The target of the posted login form is the infocard plugin's assertion
consumer service, configured:
...
- Decrypts the assertion, which has been encrypted with the
public key of one of the SP's certificates.
...