shibcas + ECP

[Cantor, Scott]

On 12/3/15, 3:10 PM, "users on behalf of Michael O Holstein" <users-bounces at shibboleth.net on behalf of michael.holstein at csuohio.edu> wrote:


>
>I am front-ending Tomcat with Apache and using AJP, configured per the wiki .. and basic auth works, but the scripts on CIlogin.org for ECP testing generate this in the idp-process.log :

You don't need to support basic-auth yourself with V3, but it's entirely different setting up use of basic-auth yourself vs. letting the IdP do it.

In any case, using ECP alongside a third party SSO integration would probably be done by configuring the login flow to use for ECP at the end of the list of flow descriptors (so it doesn't get used in most cases) and by specifying that one flow as the enabled one to use within the ECP profile config bean in the relying-party config.

-- Scott