ProtocolsAndInterfaces
The following standardized protocol interfaces are supported: | |||
Protocol | Binding | Endpoint | Profile ID |
---|---|---|---|
HTTP-Redirect | /profile/SAML2/Redirect/SSO | http://shibboleth.net/ns/profiles/saml2/sso/browser | |
 | HTTP-POST | /profile/SAML2/POST/SSO | |
 | HTTP-POST-SimpleSign | /profile/SAML2/POST-SimpleSign/SSO | |
 | Shibboleth Protocol (proprietary) | /profile/SAML2/Unsolicited/SSO | |
SOAP 1.1 | /profile/SAML2/SOAP/ECP | http://shibboleth.net/ns/profiles/saml2/sso/ecp | |
HTTP-Redirect | /profile/SAML2/Redirect/SLO | http://shibboleth.net/ns/profiles/saml2/logout | |
 | HTTP-POST | /profile/SAML2/POST/SLO | |
 | HTTP-POST-SimpleSign | /profile/SAML2/POST-SimpleSign/SLO | |
 | SOAP 1.1 | /profile/SAML2/SOAP/SLO | |
SOAP 1.1 | /profile/SAML2/SOAP/AttributeQuery | http://shibboleth.net/ns/profiles/saml2/query/attribute | |
SOAP 1.1 | /profile/SAML2/SOAP/ArtifactResolution | http://shibboleth.net/ns/profiles/saml2/query/artifact | |
Shibboleth Protocol (proprietary) | /profile/Shibboleth/SSO | http://shibboleth.net/ns/profiles/saml1/sso/browser | |
SOAP 1.1 | /profile/SAML1/SOAP/AttributeQuery | http://shibboleth.net/ns/profiles/saml1/query/attribute | |
SOAP 1.1 | /profile/SAML1/SOAP/ArtifactResolution | http://shibboleth.net/ns/profiles/saml1/query/artifact | |
 | /profile/cas/login |  | |
 | /profile/cas/proxy |  | |
 | /profile/cas/logout |  | |
 | /profile/cas/serviceValidate |  | |
 | /profile/cas/proxyValidate |  | |
 | /profile/cas/samlValidate |  | |
The following proprietary interfaces are supported: | |||
 | /profile/Logout |  | |
The following administrative interfaces are supported: | |||
 | /status | http://shibboleth.net/ns/profiles/status | |
 | /profile/admin/hello | http://shibboleth.net/ns/profiles/hello | |
 | /profile/admin/resolvertest | http://shibboleth.net/ns/profiles/resolvertest | |
 | /profile/admin/reload-service | http://shibboleth.net/ns/profiles/reload-service-configuration | |
Reload Metadata Resolver | Â | /profile/admin/reload-metadata | http://shibboleth.net/ns/profiles/reload-metadata |
 | /profile/admin/lockout | http://shibboleth.net/ns/profiles/lockout-manager | |
 | /profile/admin/mdquery | http://shibboleth.net/ns/profiles/mdquery | |
 | /profile/admin/metrics | http://shibboleth.net/ns/profiles/metrics | |
Storage | jsonapi.org | /profile/admin/storage | http://shibboleth.net/ns/profiles/storage |
 | /profile/admin/unlock-keys | http://shibboleth.net/ns/profiles/unlock-keys |
The Profile ID string can always be found in the ProfileRequestContext as the profileId and can be used to drive conditions
<bean parent="shibboleth.Conditions.Expression" c:expression="#profileContext.getProfileId().equals('http://shibboleth.net/ns/profiles/mdquery')">
Â
Â