Authenticate via Shibboleth and LDAP

[Chad La Joie]

On Mon, Jun 18, 2012 at 10:47 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> The browser doesn't use that port though. It does happen that if you
> access it with the browser, and use IE, you'll still get the prompt, but
> it doesn't matter really.

It shouldn't, but the OP clearly is hitting that port with the
browser.  He hasn't stated why/how, but the behavior makes it clear
that he is.

>>If you could get the browser to not send display the error and just
>>send the request anyways the container gladly continues on without the
>>cert.
>
> Which is basically what you want. If we document "true", then any use of
> signing in place of TLS breaks without changing every IdP.

Right, didn't the docs say "want"?

>>So, the container does not consider it mandatory, the browser does.
>
> It doesn't consider it mandatory *if* you use "want", which is the
> intended behavior?

Correct.

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered