Apache/Tomcat

[Cantor, Scott]

On 6/28/19, 10:11 PM, "users on behalf of Mak, Steve" <users-bounces at shibboleth.net on behalf of makst at upenn.edu> wrote:

> I believe that article is only relevant if you want Tomcat or Apache to handle the ECP auth.  If not, then you can simply
> let the IdP handle it via authn/Password.

That is correct. The IdP does not prompt for basic-auth, it expects the client to supply the information. If it can't, then you can't use the built-in support and have to do something else, and would typically need to redirect the IdP to use one of the RemoteUser methods and not Password.

Most ECP clients, such as exist at all, seem fine with volunteering the credentials.

-- Scott