Shibboleth 3.x UsernamePassword profile support

Alex Moskvin moskvin.aleksey at
Thu Oct 19 09:45:38 EDT 2017

Does it mean there is no support for this kind of authentication via wsse:*
extensions to authenticate user?

The problem actually is that for ECP the only known way is to do something
like this -
and with multiple authentication sources this neglects all beauty of
Shibboleth forcing you to configure the same authentication rules in a
different server (Apache HTTP or Tomcat).

Is there any native means to make Shibboleth handling ECP auth directly?


2017-10-19 0:34 GMT+03:00 Cantor, Scott <cantor.2 at>:

> On 10/18/17, 1:39 PM, "users on behalf of Alex Moskvin" <
> users-bounces at on behalf of moskvin.aleksey at>
> wrote:
> > Does Shibboleth 3.x supports UsernamePassword profile as described here
> https://www.oasis-
> >
> UsernameTokenProfile-01.htm?
> I don't think any such code is wired up in any of the SOAP profiles we
> support, which is really confined to ECP anyway.
> -- Scott
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list