User login on a website using Shibboleth without a browser

[Benito van der Zander]

Hi Peter,


> For use with your own IDP?

Someone's IDP

> You mean simething lime Jim's webisoget?
> https://staff.washington.edu/fox/webisoget/

Very similar.

There it says:

> If the page text contains a meta refresh, and its time delay is zero, 
> the redirection will be followed. 

I had that rule, too. But now I noticed one of the pages have a meta 
element in a noscript element and you must not follow that redirection, 
or you end up on a page telling you to turn on JavaScript.


>> Everyone who has a Shibboleth needs to post the HTML plz.
> You're joking, I hope.
>

It would really help

The HTML that was just posted by Dave Dole is nice. That is just like 
the HTML my app was handling so far. The submit input has no name, so I 
could ignore it...

> What are you trying to do specifically? Script all the IDPs in the
> world (or in Germany)?

Just login in at half a dozen universities

But I do not know which implementation they use, so it is more reliable 
to implement it for all Shibboleths. When it works for all Shibboleths, 
it is most likely that it works for the relevant ones as well.

> And why would you limit whatever you're doing
> to the Shibboleth implementation of a SAML IDP, and not to all SAML
> IDPs that conform to the specification?

Because I do not know if they implement the specification correctly, 
only that people can use their webpage. And after the login I need to 
scrape the data from the proprietary library OPAC system, and I do not 
know how that system handles these kinds of login, I only know 
Shibboleth redirects to that system.

> (Also your "I found another publicly accessible Shibboleth" seems to
> suggest you haven't looked to closely, as there are almost 3000 SAML
> easily reachable IDPs in the academic sector in case one wanted to
> study the variances of their login pages -- to the extent that can
> even be done, some may vary the output taking into account who/what is
> asking, making any such endeavors futile.)

Publicly accessible with a public _password_, e.g. 
https://www.switch.ch/aai/demo/

The login pages themselves can be handled by a four line script, the 
question is what happens after the login.


Cheers,
Benito



Am 03.05.2018 um 17:27 schrieb Peter Schober:
> * William Eubank<william.eubank at uah.edu>  [2018-05-03 16:00]:
>> Seems like maybe you are looking for something like CAS offers?  A REST
>> API?  CAS can do saml2 as well.
> And Shibboleth speaks CAS, and supports ECP.
>
> -peter

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180505/eb33ceb7/attachment.html>