Major Description
Shibboleth is a standards based open source software package for web single sign-on across or within organizational boundaries.
We are providing a simple portlet filter to allow Jetspeed portals to participate in Shibboleth single sign-on.
This portlet filter will look for Shibboleth specific headers and attempt to authenticate based on a configurable header.
Authentication against Jetspeed is optional and most likely not necessary, as trusting the Shibboleth provided authentication header, by protected Jetspeed as a resource with a Shibboleth Service Provider should be sufficient. Jetspeed still needs to create a Java Subject and wrapper the request, as demonstrated in this filter.
Each Shibboleth integration will vary, such as providing different headers for the remote user, LDAP attributes, or other authorization headers such as roles.