Simple Java client for accessing Shibboleth-protected services?

Keith Hazelton hazelton at doit.wisc.edu
Sun Jul 14 16:08:05 EDT 2013


On 07/14/13, Richard Eckart de Castilho  wrote:
> Keith, 
> 
> thank you for the offer. How can I do that?

Let me talk to our Middleware Technology Group. It may be fairly simple if they agree to the idea. We'd need to get metadata for your SP and then I would get you a UW-Madison Guest NetID so you could do some testing.

I'll ask Monday and let you know what I learn. --Keith
___________________
> 
> -- Richard
> 
> Am 14.07.2013 um 21:08 schrieb Keith Hazelton <hazelton at doit.wisc.edu>:
> 
> > Our UW-Madison Shib IdP has ECP enabled. Would you like to test with that? --Keith Hazelton
> > __________
> > On 07/14/13, "Cantor, Scott" wrote:
> >> On 7/14/13 12:07 PM, "Richard Eckart de Castilho"
> >> <richard.eckart at gmail.com> wrote:
> >> 
> >>> Hi,
> >>> 
> >>> I have implemented a HttpClient variant based on Apache Commons httpcore
> >>> 4.2.2 and opensaml 2.5.3 which tries to detect if the remote site is
> >>> protected using Shibboleth and if so, tries to log in to a predefined IdP
> >>> using ECP and a username and password.
> >> 
> >> Cool.
> >> 
> >>> However, when trying to test with a locally installed SP using the Spring
> >>> Security SAML integration and the TestShib.org IdP, it doesn't seem to
> >>> work. I'm trying to log in with the username/password combination
> >>> "myself"/"myself" by sending an "Authorization" HTTP header with the
> >>> base64 encoded credentials along with the login request to the IdP. The
> >>> IdP replies this:
> >> 
> >> I don't know that testshib has ECP enabled, and the error would indicate
> >> it isn't configured to do basic-auth on whatever endpoint you used. But if
> >> you managed to get it to respond at an ECP endpoint, I suppose that would
> >> mean it is configured. But apparently not correctly.
> >> 
> >> (I have no access to testshib, I'm simply guessing.)
> >> 
> >> -- Scott
> >> 
> >> 
> >> --
> >> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> > <hazelton.vcf>--
> > To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: hazelton.vcf
Type: text/x-vcard
Size: 243 bytes
Desc: Card for "Keith Hazelton" <hazelton at doit.wisc.edu>
Url : http://shibboleth.net/pipermail/users/attachments/20130714/b1135083/attachment.vcf 


More information about the users mailing list