Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Standard

The Standard variant of the HIN Federation Service is intended for general web applications without EPD requirements. The IDP endpoint is:

https://broker.hin.ch/realms/HINBroker/protocol/saml

Application Access Flow

  1. The HIN participant accesses the application provider’s application via HTTPS. The connection is direct and independent of the HIN data centre.

  2. The application provider detects that no session exists for the accessing user within its own application, and generates a signed AuthnRequest. This is transmitted to the IDP via HTTP-POST using an XHTML form and JavaScript in the user’s browser.

  3. The IDP verifies the signature and generates a signed Response, which is returned to the application provider via HTTP-POST. The application provider verifies the signature, extracts the required user information from the Assertion, and creates a session if successful.

  4. With the generated session, the user can access the application directly.

Integration

Your application must be registered on the HIN platform before use. For more information, see Integration.