<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>I'd like to enable ECP for a shibboleth service point. I am using the (well-known) ecp.sh to test if it works correctly.</div>
<div> </div>
<div>So there is a protected ressource located at /protected/file.txt. If I open this link in my browser I'll get redirected to the SSO of the IdP. After login I'll get redirected back to the file and can access it.</div>
<div> </div>
<div>Upon accessing the file with the ecp.sh script, my SP returns just the same text/html document with the 302-redirect like if I'm opening the link in the browser. The script fails because it requires the SP response to be xml. So that tells me that ECP is not working on the SP, because I should get a xml-envelope with content-type application/vnd.paos+xml in return and not a text/html redirect.</div>
<div> </div>
<div>The ONLY thing I did to enable ECP on the SP is to add ECP=true in the shibboleth2.xml. Is there ANYTHING else required to get it working? (the IdP supports it)</div>
<div> </div>
<div>
<div><SSO ECP="true" entityID="https://login...../shibboleth"><br/>
SAML2<br/>
</SSO></div>
<div> </div>
<div>Best regards</div>
</div></div></body></html>