POST & Redirect bindings

[Ram Prasath Rajendran]

Hi,

What is the difference between HTTP-Post and Redirect bindings?

How to configure/ specify that in Simplesamlphp?

[Tom Scavo]

On Wed, Nov 7, 2012 at 12:17 PM, Ram Prasath Rajendran
<r.ramp...@gmail.com> wrote:
>
> What is the difference between HTTP-Post and Redirect bindings?

I assume you mean with respect to supported (inbound) bindings at the
IdP. In general, the AuthnRequest may be sent to the IdP using
HTTP-Redirect or HTTP-POST (and perhaps other bindings as well). In my
experience, HTTP-Redirect is almost always used.

> How to configure/ specify that in Simplesamlphp?

I don't know if the SSP IdP supports inbound HTTP-POST but I do know
(from previous discussions on this list) that the SSP SP does NOT
support outbound HTTP-POST. So, unless you are using something other
than the SSP SP, and your use case requires HTTP-POST for some reason,
the question is moot.

Tom

[Ram Prasath Rajendran]

I have the SP and IDP running in SSP. Is there any other way to acheive it?

thanks

Ram

--
You received this message because you are subscribed to the Google Groups "simpleSAMLphp" group.

To post to this group, send email to simple...@googlegroups.com.
To unsubscribe from this group, send email to simplesamlph...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/simplesamlphp?hl=en.

--

Regards,

Ram Prasath Rajendran

Senior Software Engineer - EnglishCafe.com
GlobalEnglish India Private Limited

+91.98651.56484   <mobile>

9th Floor - "The Exotica" | 24,  Venkatnarayana Road | T.Nagar | Chennai - 600 017

www.GlobalEnglish.com | www.EnglishCafe.com/ramprasath

[Jaime Pérez Crespo]

Hi,

On Nov 8, 2012, at 06:44 AM, Ram Prasath Rajendran <r.ramp...@gmail.com> wrote:

I have the SP and IDP running in SSP. Is there any other way to acheive it?

If you are running SSP for both SP and IdP, may I ask why you want to specify the binding? The way this usually works (not only in SSP) is that SAML requests (SP -> IdP) are sent using HTTP-Redirect binding, as it's enough to contain the request and more user friendly, and SAML responses are sent back to the SP (IdP -> SP) using HTTP-Post binding, as this way we make sure that the response reaches the SP without being trimmed because of its length.

In general, I would say it's not a good idea to change that (unless you want to use artifact binding), as using HTTP-Redirect for SAML responses could cause problems due to the size of the response, and using HTTP-Post for SAML requests introduces an additional hidden form which must be automatically submitted, being that a new point of failure.

--

Jaime Pérez

UNINETT / Feide

mail: jaime...@uninett.no

xmpp: ja...@jabber.uninett.no

"Two roads diverged in a wood, and I, I took the one less traveled by, and that has made all the difference."
- Robert Frost

[Murugan Kathisath]

Please help me to implement the SAML2 authentication.

Which binding we have to use the SAML authentication?

Regards,

Murugan