IDP Requesting client Certificate

[Kobi Seviliya]

Hi Peter , here is the login handler i use

<ph:LoginHandler xsi:type="ph:UsernamePassword"

jaasConfigurationLocation="file:///opt/shibboleth-idp/conf/login.config">

<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>
    </ph:LoginHandler>


On Tue, May 20, 2014 at 4:02 PM, Peter Schober
<peter.schober at univie.ac.at>wrote:

> * Kobi Seviliya <kobi at outbrain.com> [2014-05-20 14:56]:
> > when users connect to the SP and being redirected to the IDP, some of
> them
> > (mostly Mac users) are getting a popup window asking the to identify
> > themselves using a client certificate ...
> > I only happens if a use has a client certificate on his local machine ,
> > other users don't get that prompt ...
>
> What login handler are you using (see your conf/handler.xml),
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
 *Kobi Seviliya,* IT Manager

 *T: *073-2238947 *M: *052-6500978 *E: *kobi at outbrain.com

-- 
The above terms reflect a potential business arrangement, are provided solely 
as a basis for further discussion, and are not intended to be and do not 
constitute a legally binding obligation. No legally binding obligations will 
be created, implied, or inferred until an agreement in final form is executed 
in writing by all parties involved.

This email and any attachments hereto may be confidential or privileged. 
 If you received this communication by mistake, please don't forward it to 
anyone else, please erase all copies and attachments, and please let me 
know that it has gone to the wrong person. Thanks.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140520/e7b9e3ab/attachment.html