Simple Java client for accessing Shibboleth-protected services?

[Cantor, Scott]

On 7/14/13 12:07 PM, "Richard Eckart de Castilho"
<richard.eckart at gmail.com> wrote:

>Hi,
>
>I have implemented a HttpClient variant based on Apache Commons httpcore
>4.2.2 and opensaml 2.5.3 which tries to detect if the remote site is
>protected using Shibboleth and if so, tries to log in to a predefined IdP
>using ECP and a username and password.

Cool.

>However, when trying to test with a locally installed SP using the Spring
>Security SAML integration and the TestShib.org IdP, it doesn't seem to
>work. I'm trying to log in with the username/password combination
>"myself"/"myself" by sending an "Authorization" HTTP header with the
>base64 encoded credentials along with the login request to the IdP. The
>IdP replies this:

I don't know that testshib has ECP enabled, and the error would indicate
it isn't configured to do basic-auth on whatever endpoint you used. But if
you managed to get it to respond at an ECP endpoint, I suppose that would
mean it is configured. But apparently not correctly.

(I have no access to testshib, I'm simply guessing.)

-- Scott