Shibboleth Integration

[Jered Myers <je...@maplewoodsoftware.com>]

I am attempting to integrate with Shibboleth using Tomcat 6 and Wicket 
1.4.18.  I don't want to get into too much detail on Shibboleth in this 
list, but I was wonder in anybody had already done this and is able to 
get the eppn attribute back after successfully logging in.  I need to 
know the user that is logging in for my Wicket application and all of 
the login is completed on the Shibboleth identity providers login page.

-- 
Jered Myers


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@wicket.apache.org
For additional commands, e-mail: users-help@wicket.apache.org

Re: Shibboleth Integration

[Jered Myers <je...@maplewoodsoftware.com>]

I figured out a solution.  Here is how the get the eppn I needed in Wicket:

final HttpServletRequest request 
=(HttpServletRequest)getRequestCycle().getRequest().getContainerRequest();
String eppn = request.getAttribute("eppn") != null ? 
request.getAttribute("eppn").toString() : "not set";

The application I was working in has multiple forms of authentication.  
The login process allows user to access the application from several 
bookmarkable pages which redirect to different authentication systems.  
I was having problems as I was redirecting after login and the page I 
was jumping to was not secured by Shibboleth directly.  The attribute 
for eppn had to be grabbed after returning from the Shibboleth login 
page and before redirecting to the home page.

The file that tells Shibboleth what to secure was in httpd.conf in 
/etc/apache2.

On 01/16/2012 04:28 PM, Jered Myers wrote:
> I am attempting to integrate with Shibboleth using Tomcat 6 and Wicket 
> 1.4.18.  I don't want to get into too much detail on Shibboleth in 
> this list, but I was wonder in anybody had already done this and is 
> able to get the eppn attribute back after successfully logging in.  I 
> need to know the user that is logging in for my Wicket application and 
> all of the login is completed on the Shibboleth identity providers 
> login page.
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@wicket.apache.org
For additional commands, e-mail: users-help@wicket.apache.org