HTTP-POST vs. ECP

[Douglas E. Engert]

On 7/14/2012 2:23 PM, Cantor, Scott wrote:
> On Jul 14, 2012, at 9:11 AM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>> On Fri, Jul 13, 2012 at 5:55 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>>>
>>> In practice, you
>>> see basic-auth and client TLS as the main options (and we all laugh at the
>>> client TLS thing, but it's more or less free on the IdP end to support it).
>>
>> I'm up for a good laugh, can you elaborate about client TLS in this case?
>
> I just meant all the things that "support" client TLS neatly ignore the part where it's undeployable for ordinary users.
>

It woks nice with Windows AD and Auto Enroll certificates, and works with Smart Cards,
but then again these require the admin to set things up.

>
> -- Scott
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>
>

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444