<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body><div style="font-family:Helvetica,Arial;font-size:13px; ">Hi,</div><div style="font-family:Helvetica,Arial;font-size:13px; "><br></div><div style="font-family:Helvetica,Arial;font-size:13px; ">It's not a Shibboleth IdP problem, it's a known bug in the test:</div><div style="font-family:Helvetica,Arial;font-size:13px; "><br></div><div style="font-family:Helvetica,Arial;font-size:13px; "> <a href="https://github.com/unikent-ms1/simple-soap-ecp-test/issues/1">https://github.com/unikent-ms1/simple-soap-ecp-test/issues/1</a></div><div style="font-family:Helvetica,Arial;font-size:13px; "><br></div><div style="font-family:Helvetica,Arial;font-size:13px; ">And a fix is here:</div><div style="font-family:Helvetica,Arial;font-size:13px; "><br></div><div style="font-family:Helvetica,Arial;font-size:13px; "> <a href="https://github.com/unikent-ms1/simple-soap-ecp-test/pull/2/files">https://github.com/unikent-ms1/simple-soap-ecp-test/pull/2/files</a></div><div style="font-family:Helvetica,Arial;font-size:13px; "><br></div><div style="font-family:Helvetica,Arial;font-size:13px; "><br></div><div style="font-family:Helvetica,Arial;font-size:13px; ">Pete</div><div style="font-family:Helvetica,Arial;font-size:13px; "><br></div> <div class="gmail_signature"><span style="font-family: 'helvetica Neue', helvetica; font-size: 14px;">-- </span><br style="font-family: 'helvetica Neue', helvetica; font-size: 14px;"><span style="font-family: 'helvetica Neue', helvetica; font-size: 14px;">Pete Birkinshaw</span><br style="font-family: 'helvetica Neue', helvetica; font-size: 14px;"><span style="font-family: 'helvetica Neue', helvetica; font-size: 14px;">Digital Identity Ltd | </span><a href="http://www.digitalidentity.ltd.uk/" style="font-family: 'helvetica Neue', helvetica; font-size: 14px;">http://www.digitalidentity.ltd.uk</a><span style="font-family: 'helvetica Neue', helvetica; font-size: 14px;"> </span><br style="font-family: 'helvetica Neue', helvetica; font-size: 14px;"><span style="font-family: 'helvetica Neue', helvetica; font-size: 14px;">Registered in England and Wales No. 7121888 </span></div> <div class="airmail_ext_on" style="color:black"><br>From: <span style="color:black">Käfer Thomas via users</span> <a href="mailto:users@shibboleth.net"><users@shibboleth.net></a><br>Reply: <span style="color:black">Shib Users</span> <a href="mailto:users@shibboleth.net"><users@shibboleth.net></a><br>Date: <span style="color:black">29 March 2022 at 11:41:45</span><br>To: <span style="color:black">Shib Users</span> <a href="mailto:users@shibboleth.net"><users@shibboleth.net></a><br>Cc: <span style="color:black">Käfer Thomas</span> <a href="mailto:thomas.kaefer@fh-campuswien.ac.at"><thomas.kaefer@fh-campuswien.ac.at></a><br>Subject: <span style="color:black"> ECP: 401 error or application/vnd.paos+xml not supported? <br></span></div><br> <blockquote type="cite" class="clean_bq"><span><div dir="ltr"><div></div><div>
<div style="font-family: Verdana, Geneva, sans-serif; font-size: 10pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); --darkreader-inline-color:#e8e6e3; --darkreader-inline-bgcolor:#262a2b;" data-darkreader-inline-color="" data-darkreader-inline-bgcolor="">
Hello everyone!
<div><br>
</div>
<div>I'm currently trying to configure an IDP 4.1.5 instance to work as a replacement for an IDP 2.3.8 instance that authenticates our users to Microsoft services.</div>
<div><br>
</div>
<div>The browser login flow seems to work quite well already, but I also need it to to handle ECP requests for IMAP & POP3 authentication.</div>
<div><br>
</div>
<div>I found this test script: https://github.com/unikent-ms1/simple-soap-ecp-test</div>
<div>which makes my IDP 2.3.8 instance reply with valid looking responses.</div>
<div><br>
</div>
<div>Before adapting the IDP 4.1.5 to work with ECP it produced this error upon receiving an ECP request:</div>
<div>MessageDecodingException: Content-Type 'application/vnd.paos+xml' was not a supported media type</div>
<div><br>
</div>
<div>After following this ECP guide for IDP 3.x (couldn't find one for IDP 4.x):</div>
<div>https://shibboleth.atlassian.net/wiki/spaces/IDP30/pages/2497773698/ECPConfiguration</div>
<div>I instead get an HTTP ERROR 401 Unauthorized response from jetty, without any output in the Shibboleth logs.</div>
<div>Only effect I could find on the server is this line:</div>
<div>[my-ip] - - [29/März/2022:10:07:51 +0000] "POST /idp/profile/SAML2/SOAP/ECP HTTP/1.1" 401 474
</div>
<div>in the jetty request.log.</div>
<div><br>
</div>
<div>Does anybody recognize a known problem and can give me a hint how to continue to get ECP working on IDP 4.1.5?</div>
<div>I guess otherwise my next steps will need to be to research how to make jetty log more verbose to find the reason for it's access denial.</div>
<div><br>
</div>
<div>Thank you,</div>
<div>kind regards,</div>
Thomas Käfer<br>
</div>
<div style="font-size:10pt; font-family: 'Verdana',sans-serif;">
<p>Informationen zum Datenschutz: www.fh-campuswien.ac.at/datenschutzerklaerung </p>
</div>
--
<br>For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
<br>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net
<br></div></div></span></blockquote></body></html>