[imp] Shibboleth/SSO integration

[Michael M Slusarz]

Quoting Cassio Nishiguchi <cassio at protectnetwork.org>:

> Hi,
> I am working on developing an authentication module to integrate Horde with
> Shibboleth (http://shibboleth.internet2.edu), which should work basically
> like a single-sign-on system - by the time the user gets to Horde, he is
> already logged in.  Shibboleth can set the username on an HTTP header like
> REMOTE_USER, so I wrote a little Auth_shib class that supports transparent
> authentication and gets the username from the header.  However, my problem is
> having this work with IMP.  It seems that IMP requires a password to
> authenticate the user, which Shibboleth doesn't provide.  Is there any good
> way to get around that requirement?  Has anyone else deployed Horde/IMP
> behind an SSO system?  If so, how did you get the IMP login to work?

It sounds like the hang-up is not going to be Horde/IMP, but rather  
your IMAP server.  IMP can authenticate through Horde for access to  
IMP application itself, but IMP can't obtain any mail information from  
the IMAP server without first authenticating to that server.

michael

___________________________________
Michael Slusarz [slusarz at horde.org]