Revision: 1812 Author: olavmrk Date: Thu Oct 1 04:48:18 2009 Log: docs: Update documentation for bridging. http://code.google.com/p/simplesamlphp/source/detail?r=1812
Modified: /trunk/docs/simplesamlphp-advancedfeatures.txt ======================================= --- /trunk/docs/simplesamlphp-advancedfeatures.txt Wed Aug 5 00:30:18 2009 +++ /trunk/docs/simplesamlphp-advancedfeatures.txt Thu Oct 1 04:48:18 2009 @@ -26,32 +26,24 @@ Bridging between protocols -------------------------- -A bridge between two protocols is built using both an IdP and an -SP, connected together. To let a SAML 2.0 SP talk to a Shibboleth -IdP, you build a simpleSAMLphp bridge from a SAML 2.0 IdP and a -Shibboleth SP.The SAML 2.0 SP talks to the SAML 2.0 IdP, which -hands the request over to the Shibboleth 1.3 SP, which forwards it -to the Shibboleth IdP. This is configured in the IdP hosted -metadata, and is controlled by the `auth` and `authority` -parameters. - -**Example 1. Example of bridge configuration** - -A bridge configured with a SAML 2.0 IdP and a Shibboleth 1.3 SP: In -the `saml20-idp-hosted.php` metadata you configure the -authentication to use Shibboleth 1.3 SP like this: - - 'auth' => 'shib13/sp/initSSO.php', - 'authority' => 'shib13' - -As no specific Shibboleth IdP is specified as parameter to the -`initSSO.php` script, the discovery service page will be shown. If -you want to connect the SAML 2.0 IdP to a specific Shibboleth 1.3 -IdP, give the entity id as a parameter to the `initSSO.php` -script: - - 'auth' => 'shib13/sp/initSSO.php?idpentityid=shib13idp.example.org', - 'authority' => 'shib13' +A bridge between two protocols is built using both an IdP and an SP, connected together. +To let a SAML 2.0 SP talk to a SAML 1.1 IdP, you build a simpleSAMLphp bridge from a SAML 2.0 IdP and a SAML 1.1 SP. +The SAML 2.0 SP talks to the SAML 2.0 IdP, which hands the request over to the SAML 1.1 SP, which forwards it to the SAML 1.1 IdP. + +If you have followed the instructions for setting up an SP, and have configured an authentication source, all you need to do is to add that authentication source to the IdP. + +**Example of bridge configuration** + +In `metadata/saml20-idp-hosted.php`: + + 'auth' => 'default-sp', + +In `config/authsources.php`: + + 'default-sp' => array( + 'saml:SP', + ), + Attribute control --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "simpleSAMLphp commits" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/simplesamlphp-commits?hl=en -~----------~----~----~----~------~----~------~--~---
