The following standardized protocol interfaces are supported: | |||
Protocol | Binding | Endpoint | Profile ID |
|---|---|---|---|
HTTP-Redirect | /profile/SAML2/Redirect/SSO | http://shibboleth.net/ns/profiles/saml2/sso/browser | |
HTTP-POST | /profile/SAML2/POST/SSO | ||
HTTP-POST-SimpleSign | /profile/SAML2/POST-SimpleSign/SSO | ||
Shibboleth Protocol (proprietary) | /profile/SAML2/Unsolicited/SSO | ||
SOAP 1.1 | /profile/SAML2/SOAP/ECP | http://shibboleth.net/ns/profiles/saml2/sso/ecp | |
HTTP-Redirect | /profile/SAML2/Redirect/SLO | http://shibboleth.net/ns/profiles/saml2/logout | |
HTTP-POST | /profile/SAML2/POST/SLO | ||
HTTP-POST-SimpleSign | /profile/SAML2/POST-SimpleSign/SLO | ||
SOAP 1.1 | /profile/SAML2/SOAP/SLO | ||
SOAP 1.1 | /profile/SAML2/SOAP/AttributeQuery | http://shibboleth.net/ns/profiles/saml2/query/attribute | |
SOAP 1.1 | /profile/SAML2/SOAP/ArtifactResolution | http://shibboleth.net/ns/profiles/saml2/query/artifact | |
Shibboleth Protocol (proprietary) | /profile/Shibboleth/SSO | http://shibboleth.net/ns/profiles/saml1/sso/browser | |
SOAP 1.1 | /profile/SAML1/SOAP/AttributeQuery | http://shibboleth.net/ns/profiles/saml1/query/attribute | |
SOAP 1.1 | /profile/SAML1/SOAP/ArtifactResolution | http://shibboleth.net/ns/profiles/saml1/query/artifact | |
ID-WSF Single Sign-On Service | SOAP 1.1 | /profile/IDWSF/SSOS | http://shibboleth.net/ns/profiles/liberty/ssos |
/profile/cas/login | |||
/profile/cas/proxy | |||
/profile/cas/logout | |||
/profile/cas/serviceValidate | |||
/profile/cas/proxyValidate | |||
/profile/cas/samlValidate | |||
The following proprietary interfaces are supported: | |||
/profile/Logout | |||
The following administrative interfaces are supported: | |||
Status | /status | http://shibboleth.net/ns/profiles/status | |
Hello World 4.1 | /profile/admin/hello | http://shibboleth.net/ns/profiles/hello | |
/profile/admin/resolvertest | http://shibboleth.net/ns/profiles/resolvertest | ||
/profile/admin/reload-service | http://shibboleth.net/ns/profiles/reload-service-configuration | ||
Reload Metadata Resolver | /profile/admin/reload-metadata | http://shibboleth.net/ns/profiles/reload-metadata | |
Lockout | /profile/admin/lockout | http://shibboleth.net/ns/profiles/lockout-manager | |
/profile/admin/mdquery | http://shibboleth.net/ns/profiles/mdquery | ||
/profile/admin/metrics | http://shibboleth.net/ns/profiles/metrics | ||
Storage | jsonapi.org | /profile/admin/storage | http://shibboleth.net/ns/profiles/storage |
/profile/admin/unlock-keys | http://shibboleth.net/ns/profiles/unlock-keys | ||
The Profile ID string can always be found in the ProfileRequestContext as the profileId and can be used to drive conditions
<bean parent="shibboleth.Conditions.Expression" c:expression="#profileContext.getProfileId().equals('http://shibboleth.net/ns/profiles/mdquery')">