Shibboleth Password with LDAP - no login screen

[Peter Schober]

* eln00b <jbru0003 at synchronoss.com> [2016-09-29 17:20]:
> I tried using /idp/login.jsp but that gives me a 404.

See the IDP documentation. By default the IDP now comes with Velocity
templates and as long as those exist in the filesystem they will
overrule (or mask) the JSP pages of the same (base-)name.

> I guess I might have misunderstood.  So are saying then that I need a form
> on my Service Provider to post the credentials to the Identity Provider
> using the basic HTTP auth?  If that's the case, what is the POST URL
> intended to be?

$deity forbid, no! Having access to the subjects credentials is none
of the Service Provider's business.

The IDP interacts with SPs using SAML protocol messages.
The authentication is (can be, should be, whatever you want) local to
the IDP.

> I'm not seeing that clarified in the documentation.

You might want to start at a very different corner of the docs, then:
https://wiki.shibboleth.net/confluence/display/CONCEPT

-peter