Simple Java client for accessing Shibboleth-protected services?

Richard Eckart de Castilho richard.eckart at gmail.com
Sun Jul 14 15:27:45 EDT 2013


Keith, 

thank you for the offer. How can I do that?

-- Richard

Am 14.07.2013 um 21:08 schrieb Keith Hazelton <hazelton at doit.wisc.edu>:

> Our UW-Madison Shib IdP has ECP enabled. Would you like to test with that? --Keith Hazelton
> __________
> On 07/14/13, "Cantor, Scott"  wrote:
>> On 7/14/13 12:07 PM, "Richard Eckart de Castilho"
>> <richard.eckart at gmail.com> wrote:
>> 
>>> Hi,
>>> 
>>> I have implemented a HttpClient variant based on Apache Commons httpcore
>>> 4.2.2 and opensaml 2.5.3 which tries to detect if the remote site is
>>> protected using Shibboleth and if so, tries to log in to a predefined IdP
>>> using ECP and a username and password.
>> 
>> Cool.
>> 
>>> However, when trying to test with a locally installed SP using the Spring
>>> Security SAML integration and the TestShib.org IdP, it doesn't seem to
>>> work. I'm trying to log in with the username/password combination
>>> "myself"/"myself" by sending an "Authorization" HTTP header with the
>>> base64 encoded credentials along with the login request to the IdP. The
>>> IdP replies this:
>> 
>> I don't know that testshib has ECP enabled, and the error would indicate
>> it isn't configured to do basic-auth on whatever endpoint you used. But if
>> you managed to get it to respond at an ECP endpoint, I suppose that would
>> mean it is configured. But apparently not correctly.
>> 
>> (I have no access to testshib, I'm simply guessing.)
>> 
>> -- Scott
>> 
>> 
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> <hazelton.vcf>--
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list