diff --git a/README.md b/README.md index 3d80e0d..2f27551 100644 --- a/README.md +++ b/README.md @@ -31,6 +31,9 @@ command_paths.sh compatible_date.sh compatible_mktemp.sh config_tools.sh +entity_endpoints_txt.xsl +entity_identifiers_txt.xsl +entity_idp_names_txt.xsl extract_entity.xsl http_tools.sh md_tools.sh @@ -50,15 +53,19 @@ $ ls -1 $BIN_DIR cget.sh check_idp_error_urls.sh list_local_idp_error_urls.sh +list_local_saml_idp_endpoints.sh probe_saml_idp.sh +probe_saml_idps.sh $ ls -1 $LIB_DIR command_paths.sh compatible_date.sh compatible_mktemp.sh config_tools.sh +entity_endpoints_txt.xsl +entity_identifiers_txt.xsl +entity_idp_names_txt.xsl extract_IdP_entityIDs.xsl -extract_IdP_names.xsl extract_InCommon_IdP_entityIDs.xsl extract_entity.xsl http_tools.sh @@ -68,6 +75,50 @@ saml_tools.sh ## Overview +### ``probe_saml_idp.sh`` + +Given a single IdP entityID, the ``probe_saml_idp.sh`` script probes all browser-facing SSO endpoints in IdP metadata. + +```Shell +$ id=https://idp.incommonfederation.org/idp/shibboleth +$ $BIN_DIR/probe_saml_idp.sh $id +0 redirects:2;response:200;dns:0.000;tcp:0.038;ssl:0.086;total:1.016 https://idp.incommonfederation.org/idp/profile/SAML2/Redirect/SSO urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect https://idp.incommonfederation.org/idp/shibboleth https://incommon.org +0 redirects:2;response:200;dns:0.000;tcp:0.038;ssl:0.088;total:0.737 https://idp.incommonfederation.org/idp/profile/SAML2/POST/SSO urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST https://idp.incommonfederation.org/idp/shibboleth https://incommon.org +WARNING: get_sso_endpoint: entity has no SSO endpoint that supports the HTTP-POST-SimpleSign binding: https://idp.incommonfederation.org/idp/shibboleth +0 redirects:2;response:200;dns:0.000;tcp:0.038;ssl:0.088;total:0.735 https://idp.incommonfederation.org/idp/profile/Shibboleth/SSO urn:mace:shibboleth:1.0:profiles:AuthnRequest https://idp.incommonfederation.org/idp/shibboleth https://incommon.org +``` + +By default, the script probes **all** browser-facing endpoints, including SAML1 endpoints. Use the ``-b`` option to probe a single endpoint with a particular binding. + +See the inline help file for details: + +```Shell +$ $BIN_DIR/probe_saml_idp.sh -h +``` + +### ``probe_saml_idps.sh`` + +Given a list of IdP entityIDs, the ``probe_saml_idps.sh`` script probes one or more browser-facing SSO endpoints in each IdP entity descriptor. + +```Shell +$ $BIN_DIR/probe_saml_idps.sh -t 6 <