ECP SP returns no xml but text/html
Nate Klingenstein
ndk at signet.id
Wed Aug 7 04:09:07 EDT 2019
Tim,
I misread your message -- I thought you were developing an ECP client and I'm not sure what IdP you're working with. I'm sorry.
https://wiki.shibboleth.net/confluence/display/CONCEPT/ECP
I don't believe anything needs to be done to enable support for receipt and processing of ECP requests on the SP side other than having an endpoint in metadata.
For us to help with issues with the SP rejecting inbound ECP SOAP requests, log messages(/var/log/shibboleth/shibd.log) would really be useful.
Also, setting ECP="true" will probably force all traffic between your IdP and SP to be ECP, which may not be your intent.
https://wiki.shibboleth.net/confluence/display/SP3/SSO
You may want two separate SessionInitiators, one of which creates a normal SAML AuthnRequest, and one of which creates an ECP request for the application to play to the IdP.
https://wiki.shibboleth.net/confluence/display/SP3/SessionInitiator
Shoulda gone to sleep awhile ago, but I hope this is the right answer,
Nate.
More information about the users
mailing list