IDPV3 HTTP basic Auth with Tomcat instead of Jetty

[Eric Wedaa]

Scott;

   Thanks.  But this begs the question, how do I test this before trying to configure the mobile application?  How can I KNOW that it's working, and not the mobile application not working properly?

>>Ericw

-----"users" <users-bounces at shibboleth.net> wrote: -----
To: Shib Users <users at shibboleth.net>
From: "Cantor, Scott" 
Sent by: "users" 
Date: 07/27/2016 10:05AM
Subject: Re: IDPV3 HTTP basic Auth with Tomcat instead of Jetty

On 7/27/16, 9:57 AM, "users on behalf of Eric Wedaa" <users-bounces at shibboleth.net on behalf of Eric.Wedaa at marist.edu> wrote:

> When I go directly to the URL ( http://XXX.marist.edu//idp/profile/SAML2/SOAP/ECP ) in a
> browser window it displays the popup box asking for my username and password.

It will not authenticate a browser because the basic-auth support built in only works if the client supplies the credentials in its request. This is virtually always good enough for an actual ECP client.

-- Scott


-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net