ProtocolsAndInterfaces
- Scott Cantor
The following standardized protocol interfaces are supported: | |||
Protocol | Binding | Endpoint | Profile ID |
|---|---|---|---|
HTTP-Redirect | /profile/SAML2/Redirect/SSO | http://shibboleth.net/ns/profiles/saml2/sso/browser | |
| HTTP-POST | /profile/SAML2/POST/SSO | |
| HTTP-POST-SimpleSign | /profile/SAML2/POST-SimpleSign/SSO | |
| Shibboleth Protocol (proprietary) | /profile/SAML2/Unsolicited/SSO | |
SOAP 1.1 | /profile/SAML2/SOAP/ECP | http://shibboleth.net/ns/profiles/saml2/sso/ecp | |
HTTP-Redirect | /profile/SAML2/Redirect/SLO | http://shibboleth.net/ns/profiles/saml2/logout | |
| HTTP-POST | /profile/SAML2/POST/SLO | |
| HTTP-POST-SimpleSign | /profile/SAML2/POST-SimpleSign/SLO | |
| SOAP 1.1 | /profile/SAML2/SOAP/SLO | |
SOAP 1.1 | /profile/SAML2/SOAP/AttributeQuery | http://shibboleth.net/ns/profiles/saml2/query/attribute | |
SOAP 1.1 | /profile/SAML2/SOAP/ArtifactResolution | http://shibboleth.net/ns/profiles/saml2/query/artifact | |
Shibboleth Protocol (proprietary) | /profile/Shibboleth/SSO | http://shibboleth.net/ns/profiles/saml1/sso/browser | |
SOAP 1.1 | /profile/SAML1/SOAP/AttributeQuery | http://shibboleth.net/ns/profiles/saml1/query/attribute | |
SOAP 1.1 | /profile/SAML1/SOAP/ArtifactResolution | http://shibboleth.net/ns/profiles/saml1/query/artifact | |
| /profile/cas/login |
| |
| /profile/cas/proxy |
| |
| /profile/cas/logout |
| |
| /profile/cas/serviceValidate |
| |
| /profile/cas/proxyValidate |
| |
| /profile/cas/samlValidate |
| |
The following proprietary interfaces are supported: | |||
| /profile/Logout |
| |
The following administrative interfaces are supported: | |||
| /status | http://shibboleth.net/ns/profiles/status | |
| /profile/admin/hello | http://shibboleth.net/ns/profiles/hello | |
| /profile/admin/resolvertest | http://shibboleth.net/ns/profiles/resolvertest | |
| /profile/admin/reload-service | http://shibboleth.net/ns/profiles/reload-service-configuration | |
Reload Metadata Resolver |
| /profile/admin/reload-metadata | http://shibboleth.net/ns/profiles/reload-metadata |
| /profile/admin/lockout | http://shibboleth.net/ns/profiles/lockout-manager | |
| /profile/admin/mdquery | http://shibboleth.net/ns/profiles/mdquery | |
| /profile/admin/metrics | http://shibboleth.net/ns/profiles/metrics | |
Storage | jsonapi.org | /profile/admin/storage | http://shibboleth.net/ns/profiles/storage |
| /profile/admin/unlock-keys | http://shibboleth.net/ns/profiles/unlock-keys | |
The Profile ID string can always be found in the ProfileRequestContext as the profileId and can be used to drive conditions
<bean parent="shibboleth.Conditions.Expression" c:expression="#profileContext.getProfileId().equals('http://shibboleth.net/ns/profiles/mdquery')">