User login on a website using Shibboleth without a browser

[Benito van der Zander]

Hi,

> You need to research SAML fully (There's some stuff in Wikipedia which AIUI were heavily edited by one of the contributors to this list) and read and understand the standards (they are all up on oasis-open.org)  Use a Shibboleth SP and IdP to help your understanding.  If you really want a non-browser profile you need to consider ECP.


Woah, so many abbreviations

I was more looking for the HTML generated by the most popular 
Shibboleths. i do not need to understand what it means. Wikipedia shows 
a <form> element with SAMLResponse and RelayState <input>, that is good, 
but I have seen it already.

An _eventId_proceed input element is also very popular. Most Shibboleths 
I looked at have an _eventId_proceed and fail without  it, even though 
it has an empty value.


I just realized I was only using input elements to build the request, 
not considering how the form was submitted.
There is at least one Shibboleth that has a <button 
name="_eventId_proceed" .../> in the HTML. Now I search for that button, 
too, might fix my problem, but I cannot know.

One can also create submit buttons using  <input type="image">. Does 
anyone use that with Shibboleth?

> Rod's question is spot
> on: What are trying to do?
Full disclosure: I wrote an app VideLibri that scrapes the webpage of 
libraries to show the lend books and warn about the due date. Late fees 
can become really expensive when you return the books too late.

Some university libraries have two separate logins, one for non-students 
and one for students that redirects to the Shibboleth of the university.

I can login with a non-student account (at some libraries) and see that 
everything works perfectly, but the students say they cannot login and I 
must fix it. The library says they do not want an app and will not help. 
And the university has not replied at all, yet.

>
>
> FWIW people in our Uni use phantomjs to script Shibboleth IdP -logins 
> to various services for monitoring purposes.

I think such a framework is too heavy. Mobile apps need to use minimal 
resources. I already wrote a small HTML parser for this, now I just need 
to find the HTML.

Cheers,
Benito



Am 30.04.2018 um 09:12 schrieb Timo Tunturi:
> On 29/04/2018 1.59, Benito van der Zander wrote:
>> when you are a user of a website using Shibboleth, the login is 
>> straightforward. You click the login button on the website in the 
>> browser, are redirected to Shibboleth, enter your login data, and are 
>> then redirected back to the webpage.
>>
>> But I would like to automate that login without a browser, almost 
>> like in a bash script.
>
> FWIW people in our Uni use phantomjs to script Shibboleth IdP -logins 
> to various services for monitoring purposes. I have not done any work 
> with phantomjs so I cannot give you any more details about that.
>
> Timo Tunturi / Aalto University IT Services

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180430/c5a440b6/attachment.html>