IT Answers » IDPS http://itknowledgeexchange.techtarget.com/itanswers Sat, 18 May 2013 21:33:01 +0000 en-US hourly 1 SAML Web SSO: Communication between IdP and SP http://itknowledgeexchange.techtarget.com/itanswers/saml-web-sso-communication-between-idp-and-sp/ http://itknowledgeexchange.techtarget.com/itanswers/saml-web-sso-communication-between-idp-and-sp/#comments Wed, 22 Jun 2011 11:04:40 +0000 Mmmx Hello,
Assuming a SP-initiated Single sign-on with SAML. After the SSO session is established, which possibilities do I have to establish a communication between the Service Provider (SP) and Identity Provider (IdP) using SAML? As I understood, there are following related protocols:

a) Assertion Query and Request
b) Artifact Resolution

But in my use case, I would like to send some data from SP to IdP after the SSO session is established and get a response with an updated assertion from IdP. The IdP would use the received data, check the SSO session, update the assertion if required and send it back to the SP. It is assumed, that the IdP and SP understand the format of sent data.
In my opinion I could use the Assertion Query and Request protocol. But can I send my own XML-data formats to the IdP within that protocol? Are there any other possiblities?

Thanks in Advance.

]]> http://itknowledgeexchange.techtarget.com/itanswers/saml-web-sso-communication-between-idp-and-sp/feed/ 0 Question on achieving ultimate network security http://itknowledgeexchange.techtarget.com/itanswers/question-on-achieving-ultimate-network-security/ http://itknowledgeexchange.techtarget.com/itanswers/question-on-achieving-ultimate-network-security/#comments Mon, 15 Nov 2010 13:34:51 +0000 It4all Hello


I would be grateful if you could advise me on a security
issue I have on my network security. I have a web application on linux with my
data stored on a mysql database on the same server (actually it is a sugarcrm)


The sugarcrm which contains information about my clients is
used by my departments for their routine jobs such as creating email marketing campaigns
or emails to clients.


As security measure for this system, the main server and
departments are isolated from internet. Only specific people have access to
internet for sending emails and email marketing campaigns.


The people who have access to internet also have access to
sugarcrm, through an intermediary application;i.e.,  Softtalk shared server  that is on the internal network ,accessible to
internal users and internet users.


The internet users have a firewall securing them from the
internet.


So the only points of internet connection for my system are
internet users who do the task of sending emails and email campaigns.


My goal is to make sure that there will be no successful
intrusion into my system and that my clients’ data are well secured and
protected. Therefore I would greatly appreciate if you could make me any
assistance and guidance on my system. Its security holes that have to be removed
and any other method for enhancing security to the level of a no-hole system.


looking forward to hear from you

 

]]> http://itknowledgeexchange.techtarget.com/itanswers/question-on-achieving-ultimate-network-security/feed/ 0