monitoring and non-person IDs

[Wessel, Keith]

I'll add that we're doing scripted monitoring of our IDP (previous thread from a few months back on this list) using Jim Fox's very excellent webisoget: http://staff.washington.edu/fox/webisoget/

Since putting this in place, many of our SP poerators have been joining efforts to use a similar approach to monitor Shib-protected resources on their SPs. I wrote a very simple Perl script that wraps around webisoget to use it as a Nagios probe.

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Tom Scavo
Sent: Thursday, June 18, 2015 8:14 AM
To: Shib Users
Subject: Re: monitoring and non-person IDs

On Thu, Jun 18, 2015 at 8:53 AM, Jerry Shipman <jes59 at cornell.edu> wrote:
>
> Does anyone have recommendations on how to monitor a shibboleth-protected SP with a non-person ID in a reasonable way, given that our IdP is a member of the federation?

I don't know of an out-of-the-box solution (i.e., something you can
just download and run) but you can completely automate SP testing with
an IdP that has a test account set up for basic authentication. A
script can log into the IdP and push a SAML assertion to the SP.
That's what we did to find SPs that didn't support assertions signed
using a SHA-2 digest algorithm. This wiki page (and its child pages)
might be useful to you: https://spaces.internet2.edu/x/JAJkAg

Hope this helps,

Tom
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net