monitoring and non-person IDs

Tom Scavo trscavo at gmail.com
Thu Jun 18 09:13:57 EDT 2015


On Thu, Jun 18, 2015 at 8:53 AM, Jerry Shipman <jes59 at cornell.edu> wrote:
>
> Does anyone have recommendations on how to monitor a shibboleth-protected SP with a non-person ID in a reasonable way, given that our IdP is a member of the federation?

I don't know of an out-of-the-box solution (i.e., something you can
just download and run) but you can completely automate SP testing with
an IdP that has a test account set up for basic authentication. A
script can log into the IdP and push a SAML assertion to the SP.
That's what we did to find SPs that didn't support assertions signed
using a SHA-2 digest algorithm. This wiki page (and its child pages)
might be useful to you: https://spaces.internet2.edu/x/JAJkAg

Hope this helps,

Tom


More information about the users mailing list