Simple Java client for accessing Shibboleth-protected services?

[Richard Eckart de Castilho]

>>> I have implemented a HttpClient variant based on Apache Commons
>>> httpcore 4.2.2 and opensaml 2.5.3 which tries to detect if the remote
>>> site is protected using Shibboleth and if so, tries to log in to a
>>> predefined IdP using ECP and a username and password.
>> 
>> For anybody interested and of course open to comments:
>> 
>> https://github.com/reckart/shib-http-client
> 
> I would suggest you take any code/design questions to the dev list.

Subscribed and posting here.

> Haven't specifically looked at your code but based on what you asked
> originally, I have to note that testshib's metadata does not advertise any
> ECP endpoint, and trying to access one at the usual location couldn't
> result in the SAML protocol error you mentioned, so I wondered if you were
> mistakenly trying to use ECP with a browser-based IdP binding.
> 
> The only allowable mechanism to contact an IdP with via ECP is the SOAP
> binding.

Anything is possible :) The URL I sent the login request to was

https://idp.testshib.org/idp/profile/SAML2/SOAP/ECP

-- Richard