User login on a website using Shibboleth without a browser

Peter Schober peter.schober at univie.ac.at
Thu May 3 08:51:03 EDT 2018


* Benito van der Zander <benito at benibela.de> [2018-04-30 23:56]:
> Everyone who has a Shibboleth needs to post the HTML plz.

You're joking, I hope.

> I found another publicly accessible Shibboleth and the button is
> <input type="submit" name="confirm" value="Akzeptieren" />. A
> classic submit button, just be careful not to pick the reset button

What are you trying to do specifically? Script all the IDPs in the
world (or in Germany)? And why would you limit whatever you're doing
to the Shibboleth implementation of a SAML IDP, and not to all SAML
IDPs that conform to the specification?

Are you trying to create a non-browser application and forcing it to
use the SAML browser-profile? (If so why not use the non-browser SAML
profile created for that specific purpose, called ECP? The shib wiki
even has contributed BASH and Python ECP command line clients:
https://wiki.shibboleth.net/confluence/display/SHIB2/Contributions)

There are thousands of SAML IDPs in the world (what you probably meant
when you talk about "Shibboleth" or "Shibboleths") and several hundred
in Germany alone. The HTML they will generate for differnt web
browsers to consume is none of your business, really.  And it will
always vary and in more unexpected ways than what you'll be able to
script around. So don't do that.

(Also your "I found another publicly accessible Shibboleth" seems to
suggest you haven't looked to closely, as there are almost 3000 SAML
easily reachable IDPs in the academic sector in case one wanted to
study the variances of their login pages -- to the extent that can
even be done, some may vary the output taking into account who/what is
asking, making any such endeavors futile.)

-peter


More information about the users mailing list