Simple Java client for accessing Shibboleth-protected services?

[Cantor, Scott]

On 7/15/13 6:27 AM, "Richard Eckart de Castilho"
<richard.eckart at gmail.com> wrote:

>> I have implemented a HttpClient variant based on Apache Commons
>>httpcore 4.2.2 and opensaml 2.5.3 which tries to detect if the remote
>>site is protected using Shibboleth and if so, tries to log in to a
>>predefined IdP using ECP and a username and password.
>
>For anybody interested and of course open to comments:
>
>https://github.com/reckart/shib-http-client

I would suggest you take any code/design questions to the dev list.


Haven't specifically looked at your code but based on what you asked
originally, I have to note that testshib's metadata does not advertise any
ECP endpoint, and trying to access one at the usual location couldn't
result in the SAML protocol error you mentioned, so I wondered if you were
mistakenly trying to use ECP with a browser-based IdP binding.

The only allowable mechanism to contact an IdP with via ECP is the SOAP
binding.

-- Scott