ECP Profile

Peter Schober peter.schober at
Mon May 9 19:29:01 EDT 2016

* Mrinal Srivastava <mrinalsrivastav at> [2016-05-09 16:53]:
> I have protected resource with Shibboleth SP and I need to
> authenticate it against Shibboleth IDP using ECP profile over
> HTTPS. I configured and able to generate SAML Request and SAML
> Response using cURL. But my response is giving AuthnFailed as
> Status.

What IDP version is this and how/where do you authenticate subjects
for ECP?
What happens if you access the IDP's ECP SingleSignOnService URL with
a browser or curl? Unless you get an HTTP 401 response code and are
prompted for HTTP Basic Auth your IDP is probably misconfigured.

More information about the users mailing list