So is response (for auth failure in case of ECP) within the spec or not? The reason I ask is if our customer wants to use another Idp, would our ECP code be different because it handles the credential validation differently so instead of a 401, it returns a proper SOAP with auth denied.<br>
<br>Thanks<br><br><br><br><div class="gmail_quote">On Fri, Dec 30, 2011 at 3:56 PM, Chad La Joie <span dir="ltr"><<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
That is the expected behavior currently. Authentication occurs<br>
outside the IdP so its the web server or servlet container giving you<br>
that error.<br>
<div><div></div><div class="h5"><br>
On Fri, Dec 30, 2011 at 18:35, Anand Somani <<a href="mailto:meatforums@gmail.com">meatforums@gmail.com</a>> wrote:<br>
> Follow up question on the setup for ECP. Everything seems to work as<br>
> expected for a successful login, but for a bad password the client gets a<br>
> 401 and a html response body, I would have expected a SOAP response/fault<br>
> (from Idp) with a rejection/denied that I could pass to SP. Is this not the<br>
> correct expectation? Maybe my Idp setup is not complete, even though it<br>
> seems to work?<br>
><br>
> Thanks<br>
><br>
><br>
> On Wed, Dec 21, 2011 at 5:56 PM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br>
>><br>
>> For the sake of the list archive, the crash was in an old log4shib version<br>
>> that was fixed several years ago and has nothing to do with ECP in<br>
>> particular.<br>
>><br>
>> -- Scott<br>
>><br>
>> --<br>
>> To unsubscribe from this list send an email to<br>
>> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
><br>
><br>
><br>
> --<br>
> To unsubscribe from this list send an email to<br>
> <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
<br>
<br>
<br>
</div></div><font color="#888888">--<br>
Chad La Joie<br>
<a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
trusted identities, delivered<br>
</font><div><div></div><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br>