Java applets being blocked by Shibboleth Authentication

[Cantor, Scott]

> 	We are able to access the applets from all browsers with no issues
> when the resource is not protected by Shibboleth. We are unable to access
> these same applets when Shibboleth is present,

None of the classloaders are going to be able to navigate a form-based login process, so unless they can send the cookies already obtained by the browser, you're guaranteeing they'll be challenged and eventually run into the IdP login form. That's not going to work.

> 	This fact is what lead us and the product vendor to conclude that the
> rules of which you speak that govern access to these applets, are being
> influenced in some way by the prescience of Shibboleth.

The rules are yours, not Shibboleth's. If you tell it to protect a URL, it will. If not, not. So you can either live with the limitation, or you'd have to change the protection rules to exempt the applet classes.

-- Scott