RE: [saml-dev] SAML testing tools

Thanks Scott.

I gave jmeter a try and couldn't get it to POST the form back unless I 
hardcoded what was going to be in the post. If anyone has any examples of 
jmeter scripts that do this or an addon or platform that does work, I would 
love to hear it. I tried on Windows, I didn't have any of my Unix machines 
in that environment.

I did try out another package, httpunit, which looks like it will work, 
although getting it to work with my self sign SSL certs has proven 
difficult.

Thanks,

Doug

>From: "Scott Cantor" <>
>To: "'Doug M'" <>, <>
>Subject: RE: [saml-dev] SAML testing tools
>Date: Thu, 13 Apr 2006 00:05:00 -0400
>
> > Well I hadn't seen any response so does that mean people don't load test
> > their SAML implementations?
>
>I use jmeter, personally. I've seen it work end to end for the POST 
>profile,
>but it seems to vary by platform. I usually only test one half at a time 
>and
>just replay the same data with debug options bypassing security checks.
>
>-- Scott
>
>
>---------------------------------------------------------------------
>This publicly archived list supports open discussion on implementing the 
>SAML OASIS Standard. To minimize spam in the
>archives, you must subscribe before posting.
>
>[Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
>Alternately, using email: list-[un]
>List archives: http://lists.oasis-open.org/archives/saml-dev/
>Committee homepage: http://www.oasis-open.org/committees/security/
>List Guidelines: http://www.oasis-open.org/maillists/guidelines.php
>Join OASIS: http://www.oasis-open.org/join/
>

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/