Need help in configuring Shibboleth IDP and test it with my own REST Service (SP)

[Peter Schober]

* Srinivas Munigala <srinivas.munigala at gmail.com> [2014-03-06 11:43]:
> I copied SP's metadata file @ C:\opt\shibboleth-idp\metadata and
> updated path in relyingParty.xml file as follows:*
> <!-- Load the SP's own metadata.  This is necessary for artifact support. -->
>         <metadata:MetadataProvider id="SPMD"
> xsi:type="metadata:FilesystemMetadataProvider"
> 
> metadataFile="C:\opt\shibboleth-idp/metadata/metadata_-_RestSP.xml"
>                                    maxRefreshDelay="P1D" />*

OK

> According to above setting, I have updated following HTTP BASIC auth
> setting in web.xml of
> *<login-config> <auth-method>BASIC</auth-method>
> <realm-name>statqa</realm-name> </login-config>*
> 
> here, *statqa *is the password that I provided while IDP installation
> for generated certificates

What in the world gave you that idea? If you're following someone's
instructions consider following something else.

AFAIK the realm for HTTP Basic Auth can be any string, and it will be
sent/visible to the HTTP user agent. So if you want your keystore
password to be transmitted to every web browser that's asking you
could do this. (Hint: Don't do this.)

> Did I miss any configuration?

For configuring http basic auth in Apache Tomcat consult the Apache
Tomcat documentation.

> How would I test that my configuration is correct and SP's metadata
> is loaded correctly?

0. Don't forget to add your IDP's metadata to the SP
1. Access the SP at a protected resource
2. See what happens

-peter