Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I recently deployed a server and website that authenticates with my university's Shibboleth authentication system. Functionally, it works great. Aesthetically, there is much

When you go to the login page, the login page is redirected to the Shibboleth's server user authentication page. While it works, I would rather put a username and password text boxes on my website, and, on submission, pass those to Shibboleth.

Is it possible to use an alternate web form and have the information be passed to Shibboleth?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Having your own custom login form would defeat the point of using Shibboleth. It's meant to send your users to their IdP, which they can recognize as trustworthy and authenticate there, only then to delegate the authentication and authorization assertions to the service provider.

If you're unhappy with the look and feel of your federation WAYF or the institution IdP, talk to your federation or your IdP.

(As a side note, branding and look&feel for WAYFs and IdPs to improve the user experience was one of the topic talked about at the Federated Access Management (FAM10) conference: there will probably be new things coming in the UK federation if you're part of it.)

share|improve this answer
Thanks Bruno! That makes complete sense, and I had not thought of it from that perspective. –  Brian Oct 11 '10 at 11:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.