Return-Path: X-Original-To: apmail-cxf-issues-archive@www.apache.org Delivered-To: apmail-cxf-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 8CE1918291 for ; Thu, 31 Mar 2016 10:59:26 +0000 (UTC) Received: (qmail 78749 invoked by uid 500); 31 Mar 2016 10:59:26 -0000 Delivered-To: apmail-cxf-issues-archive@cxf.apache.org Received: (qmail 78608 invoked by uid 500); 31 Mar 2016 10:59:26 -0000 Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cxf.apache.org Delivered-To: mailing list issues@cxf.apache.org Received: (qmail 78414 invoked by uid 99); 31 Mar 2016 10:59:26 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 31 Mar 2016 10:59:26 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id D0DC82C1F64 for ; Thu, 31 Mar 2016 10:59:25 +0000 (UTC) Date: Thu, 31 Mar 2016 10:59:25 +0000 (UTC) From: "Colm O hEigeartaigh (JIRA)" To: issues@cxf.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Closed] (FEDIZ-143) Home Realm Discovery based on OIDC login_hint MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/FEDIZ-143?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Colm O hEigeartaigh closed FEDIZ-143. ------------------------------------- > Home Realm Discovery based on OIDC login_hint > --------------------------------------------- > > Key: FEDIZ-143 > URL: https://issues.apache.org/jira/browse/FEDIZ-143 > Project: CXF-Fediz > Issue Type: New Feature > Components: IDP, Plugin > Reporter: Jan Bernhardt > Assignee: Jan Bernhardt > Fix For: 1.3.0 > > > Automatic home realm discovery at the IDP should be possible based on a {{login_hint}} coming from the RP via OIDC. > Example: > 1. User enters his email at a web-portal to start the login flow. > 2. email will be used as a {{login_hint}} when redirecting to the OIDC service > 3. Fediz plugin at OIDC service extracts user domain from email address and sends domain as {{whr}} to Fediz IDP. > 4. Fediz IDP uses {{whr}} parameter to redirect user to its home realm > 5. User logs in to his home IDP. -- This message was sent by Atlassian JIRA (v6.3.4#6332)