Tuakiri Documentation

ECP

The Enhanced Client/Proxy profile is an extension to the SAML 2.0 protocol suite that adds support for non-browser tools and applications to establish a Shibboleth session.

Enabling ECP sessions requires several steps to be completed:

  1. Enable ECP in the Shibboleth SP configuration on the service to be accessed via ECP
  2. Register ECP support for this SP in the Federation Registry
  3. Enable ECP on all IdPs accessing this service

For testing ECP, there is a bash and python implementation of ECP at https://wiki.shibboleth.net/confluence/display/SHIB2/Contributions#Contributions-Other%2CRelated%2CContributions

Documentation