Questions regarding ECP and ExternalAuthN handler

[Cantor, Scott]

On 2/4/14, 1:35 PM, "Carlos Milán Figueredo" <cmilanf at hispamsx.org> wrote:

>Is it a problem to use ECP while the only active handler are the
>ExternalAuthN and the PreviousSession one? I¹m not getting any log trace
>from ECP, it seems suspicious.

The only thing is supports is basic-auth, or more accurately on the IdP
side, REMOTE_USER populated by the container. Clients are basic-auth only
in practice. None of the login handlers in v2 have any relevance to ECP
support.

>https://myidp.org/idp/profile/SAML2/SOAP/ECP with the web browser, I keep
>getting an HTTP authentication request over and over. Should I get a SOAP
>response when the system is working?

If it's protected by basic-auth, you should get an HTTP authentication
challenge until you satisfy it.

>I perform the authentication for ECP using JAAS with an LDAP directory.
>But it¹s not clear to me how I have to tell Tomcat the place where the
>login.config file is.

http://tomcat.apache.org/tomcat-6.0-doc/index.html

-- Scott