shibboleth

README

Shibboleth provider

Instructions

Uses default Shibboleth 3.3 pathing for the entry point. e.g. if url is "https://idp.example.com" and the aws_urn is the default, this will construct the following URL to use. https://idp.example.com/idp/profile/SAML2/Unsolicited/SSO?providerId=urn:amazon:webservices

Features

• Prompts for Duo MFA when logging in when "mfa" is set to Auto. Options are Duo Push, Phone Call, and Passcode.

Limitations

• Has only been tested with Shibboleth 3.3 with Duo MFA enabled.

Documentation

Index

• type Client
  • func New(idpAccount *cfg.IDPAccount) (*Client, error)
  • func (sc *Client) Authenticate(loginDetails *creds.LoginDetails) (string, error)

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

Client wrapper around Shibboleth enabling authentication and retrieval of assertions

func New

func New(idpAccount *cfg.IDPAccount) (*Client, error)

New create a new Shibboleth client

func (*Client) Authenticate

func (sc *Client) Authenticate(loginDetails *creds.LoginDetails) (string, error)

Authenticate authenticate to Shibboleth and return the data from the body of the SAML assertion.