Shibboleth Developers

[Tom Scavo <>]

On 8/24/05, Howard Gilbert 
<>
 wrote:
> > -----Original Message-----
> > okay, now I think I may remember why I didn't use Mock Objects...
> > mockrunner doesn't appear to have a simple way to specify a client
> > SSL certificate in the request.  unless I'm overlooking something... ?
> 
> First, I assume this question arises in the context of the AA or Artifact
> queries, which are the places where a client cert can matter.
> 
> The answer (without putting it in a context) is that you set the
> "javax.servlet.request.X509Certificate" attribute of the
> MockHttpServletRequest object to point to an X509Cetificate[] that you get
> from the SP Credentials. Then you pass the request over to the Servlet in
> the IdP.

FWIW, such a test would be invaluable since client authn is a common
source of problems.  This is exacerbated by the IdPs handling of
unauthenticated requests, that is, to fall back on the
defaultRelyingParty.  This leads to further problems.

I don't understand how you intend to test the AA separate from the SSO
service.  What NameIdentifier will you send the AA in the attribute
query?

Tom