Java applets being blocked by Shibboleth Authentication

[Johnson, Craig]

Scott,
	
	Thanks for your response. Unfortunately it brings a bit of confusion as to the role of Shibboleth in protecting a resource.  

	We are able to access the applets from all browsers with no issues when the resource is not protected by Shibboleth. We are unable to access these same applets when Shibboleth is present, 

	This fact is what lead us and the product vendor to conclude that the rules of which you speak that govern access to these applets, are being influenced in some way by the prescience of Shibboleth.

	If Shibboleth is not the culprit here, and we have no such issues with IE, would your advice then be that we should consult with Chrome and Mozilla development for advice on how each browser's particular HTTP client handles cookies and cookie store sharing for a possible solution?
		
	Thanks,
	Craig Johnson   	
		  


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, January 28, 2015 1:49 PM
To: Shib Users
Subject: Re: Java applets being blocked by Shibboleth Authentication 

On 1/28/15, 8:54 PM, "Johnson, Craig" <cjohnson at it.ucla.edu> wrote:



>My question is: Does there exist certain filter settings within 
>Shibboleth that will work in conjunction with individual browser 
>settings which would correct this issue?

If the browser can't get the applet code, it won't work, but there's nothing Shibboleth can do about that. If the applet code is sitting behind rules that limit its access, then if the browser doesn't make the request with a cookie that corresponds to a session, it isn't going to work. If you want to fix that, you have to prevent that from happening. I would imagine different browsers have different behavior around the HTTP client used and whether the cookie store is shared or not.

If the classes don't need to be limited access, then fix the rules that are preventing it.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net