Automated Shib login for monitoring

[Cantor, Scott]

> I'd like to actually have my code generate the SAML request and process the
> response, making sure it's getting back valid attributes.
> 
> First, does this seem like a sane line of thinking?

I think you're better off running an SP locally to drive the test, personally. Mainly because of the response part, you can always just send an unsolicited request to avoid creating a standard one.

> Secondly, are there any good resources out there for knowing exactly what
> I'm going to need to do for request and response handling short of reading
> the SP source code?

I wouldn't read the source code, I'd read the standard. There's no simple single place in the SP where anything like that happens, it's far too decomposed for that.

-- Scott