<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1028" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks for getting back to me, I’m going to have a chance to look at this again tomorrow and had a couple additional questions now.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Looking through the MS O365 intergration white paper there is a short part about enabling ECP in the doc pasted below, it has you define a JNDIRealm in the
server.xml <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">However when enabling the basic authentication for ECP, it references shibuserpassauth in the <login-config> which I have no definition for in server.xml?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoListNumber" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:50.15pt;text-align:justify;mso-list:none">
<span style="font-size:11.0pt;color:#1F497D">Earlier in the documentation it does have this snippet<o:p></o:p></span></p>
<p class="MsoListNumber" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:50.15pt;text-align:justify;mso-list:none">
<span style="font-size:11.0pt;color:#1F497D"><br>
</span>Ensure the <i><ph:</i><i>LoginHandler></i> element is set as follows:<o:p></o:p></p>
<div style="mso-element:para-border-div;border:dotted windowtext 1.0pt;padding:1.0pt 4.0pt 1.0pt 4.0pt;background:#F3F3F3">
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><ph:LoginHandler xsi:type="ph:UsernamePassword"
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> jaasConfigurationLocation="file:///C:\Program Files (x86)\Internet2\Shib2Idp/conf/login.config"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <ph:AuthenticationMethod><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> </ph:AuthenticationMethod><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <ph:AuthenticationMethod><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> </ph:AuthenticationMethod><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""></ph:LoginHandler><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><o:p> </o:p></span></p>
</div>
<p class="MsoListNumber" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l3 level1 lfo5">
<span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span>If necessary, modify the <i><ph:</i><i>LoginHandler></i> element to reflect the above settings. More particularly, check that the
<i>jaasConfigurationLocation</i> correctly points to the location of the <i>login.config</i> file, which is included in the Shibboleth 2 IdP distribution (in the
<i>%</i><i><span style="color:#333333">IDP_Home</span>%\conf</i> directory).<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Does this entry read the login.config and make a realm out of the definition in that file?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Lucida Console"">jaasConfigurationLocation="file:///C:\Program Files (x86)\Internet2\Shib2Idp/conf/login.config"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Lucida Console""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D">Below are the enable ECP instructions, whats the point of the JNDI realm, I don’t see anywhere it is being called?<o:p></o:p></span></p>
<h4 style="mso-list:l1 level4 lfo1"><a name="_Ref339037964" target="_top" rel="nofollow" link="external"><span style="mso-list:Ignore">1.1.1.1<span style="font:7.0pt "Times New Roman"">
</span></span>Enabling the Shibboleth ECP extension</a><o:p></o:p></h4>
<p class="MsoNormal" style="text-align:justify"><span style="mso-fareast-language:FR">This section supposes that the ECP extension has been installed as part of the Shibboleth 2 IdP setup (see section ยง
</span><span style="mso-fareast-language:FR">4.2.6</span><span style="mso-fareast-language:FR">
</span><span style="font-variant:small-caps">Installing the IdP ECP Extension on Shibboleth 2 versions prior to 2.3.3 (Optional)</span><span style="mso-fareast-language:FR">).<o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><span style="mso-fareast-language:FR">The first step consists in
</span>enabling in the “captive” Tomcat server the HTTP Basic authentication using accounts in our LDAP AD LDS instance. Please note that the Shibboleth ECP extension authentication is currently limited to HTTP Basic authentication.<span style="mso-fareast-language:FR"><o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="Picture_x0020_2" o:spid="_x0000_s1027" type="#_x0000_t75" alt="Description: Description: Description : Description : procedure_dd" style='width:18pt;height:13.5pt;visibility:visible;mso-wrap-style:square;mso-left-percent:-10001;mso-top-percent:-10001;mso-position-horizontal:absolute;mso-position-horizontal-relative:char;mso-position-vertical:absolute;mso-position-vertical-relative:line;mso-left-percent:-10001;mso-top-percent:-10001'>
<w:wrap type="none"/>
<w:anchorlock/>
</v:shape><![endif]--><img width="24" height="18" src="http://shibboleth.1660669.n2.nabble.com/attachment/7591994/0/image001.png" alt="Description: Description: Description : Description : procedure_dd" v:shapes="Picture_x0020_2">To
enable the HTTP Basic authentication, proceed with the following steps:<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l2 level1 lfo3">
<span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span>Use Windows Explorer to navigate to <i>%</i><i><span style="font-size:9.0pt">TOMCAT_HOME</span>%\conf</i>, e.g.
<i>C:\Program Files (x86)\Internet2\CaptiveTomcat 6.0\conf</i>.<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l2 level1 lfo3">
<span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span>Right-click the <i>server.xml</i> file, and then click <b>
Edit</b>. The file should open in Notepad.<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l2 level1 lfo3">
<span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span>Press Ctrl+F to find “<i><Realm></i>”.<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l2 level1 lfo3">
<span style="mso-list:Ignore">4.<span style="font:7.0pt "Times New Roman"">
</span></span>Move to the line BELOW the <Realm> element and insert the following text:<o:p></o:p></p>
<div style="mso-element:para-border-div;border:dotted windowtext 1.0pt;padding:1.0pt 4.0pt 1.0pt 4.0pt;background:#F3F3F3">
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><Realm className="org.apache.catalina.realm.JNDIRealm"
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> debug="99"<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> connectionURL="ldap://localhost:389"<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> authentication="simple"<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> referrals="follow"<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> connectionName=" CN=ShibSvc,CN=Users,DC=SHIB,DC=IDMGT,DC=ARCHIMS,DC=FR "<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> connectionPassword="Password1"
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> userSearch="(cn={0})"<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> userBase=" CN=Users,DC=SHIB,DC=IDMGT,DC=ARCHIMS,DC=FR "
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> userSubtree="false"<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> allRolesMode = "authOnly" /><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><o:p> </o:p></span></p>
</div>
<div style="mso-element:para-border-div;border:none;border-left:solid gray 2.25pt;padding:0in 0in 0in 6.0pt;margin-left:.25in;margin-right:0in">
<p class="Note" style="mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;page-break-after:avoid;border:none;padding:0in">
<b><span style="font-size:10.0pt;font-family:"Calibri","sans-serif"">Note: <o:p></o:p></span></b></p>
<p class="Note" style="mso-margin-top-alt:12.0pt;margin-right:0in;margin-bottom:12.0pt;margin-left:0in;text-align:justify;page-break-after:avoid;border:none;padding:0in">
<i><span style="font-size:10.0pt;font-family:"Calibri","sans-serif"">Replace “Shib” and “Password1” by the username and password of your choice.<o:p></o:p></span></i></p>
</div>
<p class="MsoListNumber" style="mso-margin-top-alt:6.0pt;margin-right:0in;margin-bottom:6.0pt;margin-left:50.2pt;text-align:justify;mso-list:none">
<span style="font-size:4.0pt"><o:p> </o:p></span></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l2 level1 lfo3">
<span style="mso-list:Ignore">5.<span style="font:7.0pt "Times New Roman"">
</span></span>Save and close the <i>server.xml</i> file.<o:p></o:p></p>
<p class="MsoNormal" style="text-align:justify"><span style="mso-fareast-language:FR">You must then edit the
<i>web.xml</i> file in the IdP's source code (located under <i>C:\Program File (x86)\Shib2IdPInstall\src\main\webapp\WEB-INF</i>) to enable the ECP extension and rebuild a WAR file with the
<i>install.bat</i> batch file.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify"><!--[if gte vml 1]><v:shape id="Picture_x0020_1" o:spid="_x0000_s1026" type="#_x0000_t75" alt="Description: Description: Description : Description : procedure_dd" style='width:21.75pt;height:14.25pt;visibility:visible;mso-wrap-style:square;mso-left-percent:-10001;mso-top-percent:-10001;mso-position-horizontal:absolute;mso-position-horizontal-relative:char;mso-position-vertical:absolute;mso-position-vertical-relative:line;mso-left-percent:-10001;mso-top-percent:-10001'>
<w:wrap type="none"/>
<w:anchorlock/>
</v:shape><![endif]--><img width="29" height="19" src="http://shibboleth.1660669.n2.nabble.com/attachment/7591994/1/image002.png" alt="Description: Description: Description : Description : procedure_dd" v:shapes="Picture_x0020_1">To
enable the ECP extension, proceed with the following steps:<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l4 level1 lfo4">
<span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span>Use Windows Explorer to navigate to <i><span style="mso-fareast-language:FR">C:\Program File (x86)\Shib2IdPInstall\src\main\webapp\WEB-INF</span></i>.<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l4 level1 lfo4">
<span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span>Right-click the <i>web.xml</i> file, and then click <b>Edit</b>. The file should open in Notepad.<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l4 level1 lfo4">
<span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span>Press Ctrl+F to find “<i><!—Uncomment to use container managed authentication --></i>”.<i><o:p></o:p></i></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l4 level1 lfo4">
<span style="mso-list:Ignore">4.<span style="font:7.0pt "Times New Roman"">
</span></span>Move to the line BELOW and insert the following text:<o:p></o:p></p>
<div style="mso-element:para-border-div;border:dotted windowtext 1.0pt;padding:1.0pt 4.0pt 1.0pt 4.0pt;background:#F3F3F3">
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><security-constraint>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <display-name>Shibboleth IdP</display-name>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <web-resource-collection>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <web-resource-name>ECP</web-resource-name>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <url-pattern>/profile/SAML2/SOAP/ECP</url-pattern>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <http-method>GET</http-method>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <http-method>POST</http-method>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> </web-resource-collection>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <auth-constraint>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <role-name>*</role-name><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> </auth-constraint>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <user-data-constraint>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> </user-data-constraint>
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""></security-constraint><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console"">
<o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><login-config><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <auth-method>BASIC</auth-method><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""> <realm-name>ShibUserPassAuth</realm-name><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""></lon-config><o:p></o:p></span></p>
<p class="MsoNormal" style="background:#F3F3F3;border:none;padding:0in"><span style="font-size:7.0pt;font-family:"Lucida Console""><o:p> </o:p></span></p>
</div>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l4 level1 lfo4">
<span style="mso-list:Ignore">5.<span style="font:7.0pt "Times New Roman"">
</span></span>Save and close the <i>web.xml</i> file.<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l4 level1 lfo4">
<span style="mso-list:Ignore">6.<span style="font:7.0pt "Times New Roman"">
</span></span>Open a command prompt and navigate to <i><span style="mso-fareast-language:FR">C:\Program File (x86)\Shib2IdPInstall</span></i>.<o:p></o:p></p>
<p class="MsoListNumber" style="margin-left:50.2pt;text-align:justify;text-indent:-.25in;mso-list:l4 level1 lfo4">
<span style="mso-list:Ignore">7.<span style="font:7.0pt "Times New Roman"">
</span></span>Run the <i>install.bat</i> batch file to rebuild a WAR file for Shibboleth.<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> Cantor, Scott E. [via Shibboleth] [mailto:ml-node+<a href="/user/SendEmail.jtp?type=node&node=7591994&i=0" target="_top" rel="nofollow" link="external">[hidden email]</a>]
<br>
<b>Sent:</b> Sunday, November 24, 2013 1:35 PM<br>
<b>To:</b> Craig Cook<br>
<b>Subject:</b> Re: IdPEnableECP question<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">On 11/22/13, 6:24 PM, "Nate Klingenstein" <<a href="/user/SendEmail.jtp?type=node&node=7591746&i=0" target="_top" rel="nofollow" link="external">[hidden email]</a>> wrote:
<br>
<br>
>Craig, <br>
> <br>
>It's just saying that you can use the same mechanism that you use to <br>
>protect /idp/Authn/RemoteUser (servlet filter, Apache directives in front <br>
>of AJP, whatever) should also be usable to protect <br>
>/idp/profile/SAML2/SOAP/ECP. <br>
<br>
That's probably dubious advice, since I doubt most people using RemoteUser <br>
are actually using basic authentication. I don't know what exactly was in <br>
my mind writing that. <br>
<br>
-- Scott <br>
<br>
<br>
-- <br>
To unsubscribe from this list send an email to <a href="/user/SendEmail.jtp?type=node&node=7591746&i=1" target="_top" rel="nofollow" link="external">
[hidden email]</a> <br>
<br>
<o:p></o:p></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="1" width="100%" noshade="" style="color:#CCCCCC" align="center">
</div>
<div>
<div>
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Tahoma","sans-serif";color:#444444">If you reply to this email, your message will be added to the discussion below:<o:p></o:p></span></b></p>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Tahoma","sans-serif";color:#444444"><a href="http://shibboleth.1660669.n2.nabble.com/IdPEnableECP-question-tp7591714p7591746.html" target="_top" rel="nofollow" link="external">http://shibboleth.1660669.n2.nabble.com/IdPEnableECP-question-tp7591714p7591746.html</a>
<o:p></o:p></span></p>
</div>
<div style="margin-top:4.8pt">
<p class="MsoNormal" style="line-height:18.0pt"><span style="font-size:8.5pt;font-family:"Tahoma","sans-serif";color:#666666">To unsubscribe from IdPEnableECP question,
<a href="" target="_top" rel="nofollow" link="external">
click here</a>.<br>
<a href="http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml" target="_top" rel="nofollow" link="external"><span style="font-size:7.0pt;font-family:"Times New Roman","serif"">NAML</span></a>
<o:p></o:p></span></p>
</div>
</div>
<br/><hr align="left" width="300" />
View this message in context: <a href="http://shibboleth.1660669.n2.nabble.com/IdPEnableECP-question-tp7591714p7591994.html">RE: IdPEnableECP question</a><br/>
Sent from the <a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html">Shibboleth - Users mailing list archive</a> at Nabble.com.<br/>