OIOSAML SP demo authenticating against the IdP from testshib.org

[Philip Durbin]

On Tue, Oct 15, 2013 at 9:32 AM, Philip Durbin
<philip_durbin at harvard.edu> wrote:
>>> p.s. More details about what I've tried can be found in this thread
>>> I started on the OIOSAML forum: http://digitaliser.dk/forum/2526560
>>
>> >From that thread (using a buggy version, failing to build OIOSAML)
>> I'd say you're nowhere near interop questions with the Shib IdP.
>
> I couldn't agree with you more, but my hope is that some helpful
> person on this mailing list has overcome these challenges with OIOSAML
> and gotten OIOSAML working to the point that interop with a Shib IdP
> is possible.

I found someone who can help: Shilen Patel from Duke.

An older version of OIOSAML demo app (oiosaml.java-demo-5922.war)
works with IdP metadata from
https://shib.oit.duke.edu/duke-metadata-2-signed.xml

It also works with IdP metadata from another institution I've tried.

However, as far as I can tell, the same version of the OIOSAML demo
app doesn't work with
http://www.testshib.org/metadata/testshib-providers.xml as well as yet
another IdP I've tried.

The only thing I'm changing is the IdP metadata I'm uploading as I
configure OIOSAML.

In short, the OIOSAML demo app "just works" with metadata from two of
the four IdPs I've tried, but the TestShib IdP isn't one of them. If
any TestShib folks are listening, I'd be happy to work with you to try
to figure out why.

Phil

p.s. The TestShib IdP *does* work great with the Shibboleth SP I
describe at https://github.com/dvn/shibpoc

-- 
Philip Durbin
Software Developer for http://thedata.org
http://www.iq.harvard.edu/people/philip-durbin