Shibboleth and .NET

Josh picture Josh · Aug 21, 2009 · Viewed 10.4k times · Source

I've got a requirement that a ASP.NET web app use Shibboleth for the authentication. Has anyone done this before? Are there libraries out there to support the method calls? Or is this a Java only thing?

Answer

Steve Claridge picture Steve Claridge · Aug 21, 2009

It's definitely not a Java-only thing, there's an Apache module available for download on the Shibboleth site.

I don't know if there's anything specific for .NET.

We implemented Shibboleth a while back and we originally tried to use the Java solutions - it was a nightmare. The java apps were badly-written, buggy and badly documented. It was hassle after hassle and we eventually decided to use the Apache module on a dedicated server and forward successfully authenticated users onto our Tomcat app. The Apache module was a breeze to setup, configure and get working.

Don't know if you've already realised but the Shib documentation and website are incredibly hard to navigate - it's a fight to find any useful information. I did go and look for a .NET implementation on there but gave up!

If our Java experiences are anything to go by I would seriously suggest setting up an Apache server with the Shibboleth module installed and saving yourself a world of pain.

This is a good site for testing your Shibboleth install once you have it set up: http://www.testshib.org/testshib-two/index.jsp

If you do find a good .NET solution then I'd be very interested to hear about it. Good luck!