User login on a website using Shibboleth without a browser

Benito van der Zander benito at benibela.de
Sat Apr 28 18:59:36 EDT 2018


Hi,

when you are a user of a website using Shibboleth, the login is 
straightforward. You click the login button on the website in the 
browser, are redirected to Shibboleth, enter your login data, and are 
then redirected back to the webpage.

But I would like to automate that login without a browser, almost like 
in a bash script.

Now handling the first redirection is simple, it is 302-status in this 
case. Then send the POST request with the login data. Zero issues there, 
and it is the same for all users.

But how do you handle the second redirection back to the webpage? What 
different kinds of redirects are used by SAML2/Shibboleth? In the 
browser there seems to be a javascript performing the redirection, but 
that cannot be used by scripts.
Some Shibboleths have a <button> to click, and sometimes that button is 
actually a <input type=select> element. Sometimes there are different 
buttons, one aborting everything. I think I saw a link once.
Is there a list of all possible redirects used by Shibboleth? (the real 
issue is that my Shibboleth password has expired, so I cannot see 
anything past the login form, but a solution for all Shibboleths better 
than one for a specific Shibboleth anyways)


Bye,
Benito
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180429/b90b4281/attachment.html>


More information about the users mailing list