The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.
ProtocolsAndInterfaces
- Scott Cantor
- Rod Widdowson
- Takeshi Nishimura
- Ian Young
The following standardized protocol interfaces are supported: | |||
Protocol | Binding | Endpoint | Profile ID |
|---|---|---|---|
HTTP-Redirect | /profile/SAML2/Redirect/SSO | http://shibboleth.net/ns/profiles/saml2/sso/browser | |
HTTP-POST | /profile/SAML2/POST/SSO | ||
HTTP-POST-SimpleSign | /profile/SAML2/POST-SimpleSign/SSO | ||
Shibboleth Protocol (proprietary) | /profile/SAML2/Unsolicited/SSO | ||
SOAP 1.1 | /profile/SAML2/SOAP/ECP | http://shibboleth.net/ns/profiles/saml2/sso/ecp | |
HTTP-Redirect | /profile/SAML2/Redirect/SLO | http://shibboleth.net/ns/profiles/saml2/logout | |
HTTP-POST | /profile/SAML2/POST/SLO | ||
HTTP-POST-SimpleSign | /profile/SAML2/POST-SimpleSign/SLO | ||
SOAP 1.1 | /profile/SAML2/SOAP/SLO | ||
SOAP 1.1 | /profile/SAML2/SOAP/AttributeQuery | http://shibboleth.net/ns/profiles/saml2/query/attribute | |
SOAP 1.1 | /profile/SAML2/SOAP/ArtifactResolution | http://shibboleth.net/ns/profiles/saml2/query/artifact | |
Shibboleth Protocol (proprietary) | /profile/Shibboleth/SSO | http://shibboleth.net/ns/profiles/saml1/sso/browser | |
SOAP 1.1 | /profile/SAML1/SOAP/AttributeQuery | http://shibboleth.net/ns/profiles/saml1/query/attribute | |
SOAP 1.1 | /profile/SAML1/SOAP/ArtifactResolution | http://shibboleth.net/ns/profiles/saml1/query/artifact | |
ID-WSF Single Sign-On Service | SOAP 1.1 | /profile/IDWSF/SSOS | http://shibboleth.net/ns/profiles/liberty/ssos |
/profile/cas/login | |||
/profile/cas/proxy | |||
/profile/cas/logout | |||
/profile/cas/serviceValidate | |||
/profile/cas/proxyValidate | |||
/profile/cas/samlValidate | |||
The following proprietary interfaces are supported: | |||
/profile/Logout | |||
The following administrative interfaces are supported: | |||
Status | /status | http://shibboleth.net/ns/profiles/status | |
Hello World 4.1 | /profile/admin/hello | http://shibboleth.net/ns/profiles/hello | |
/profile/admin/resolvertest | http://shibboleth.net/ns/profiles/resolvertest | ||
/profile/admin/reload-service | http://shibboleth.net/ns/profiles/reload-service-configuration | ||
Reload Metadata Resolver | /profile/admin/reload-metadata | http://shibboleth.net/ns/profiles/reload-metadata | |
Lockout | /profile/admin/lockout | http://shibboleth.net/ns/profiles/lockout-manager | |
/profile/admin/mdquery | http://shibboleth.net/ns/profiles/mdquery | ||
/profile/admin/metrics | http://shibboleth.net/ns/profiles/metrics | ||
Storage | jsonapi.org | /profile/admin/storage | http://shibboleth.net/ns/profiles/storage |
/profile/admin/unlock-keys | http://shibboleth.net/ns/profiles/unlock-keys | ||
The Profile ID string can always be found in the ProfileRequestContext as the profileId and can be used to drive conditions
<bean parent="shibboleth.Conditions.Expression" c:expression="#profileContext.getProfileId().equals('http://shibboleth.net/ns/profiles/mdquery')">
Â