Binghamton University is actually in Vestal, NY, not Binghamton, so the Town of Vestal PD and the SUNY University Police can help your friend with any questions of legality.
For pepper spray, try Dick's sporting goods a few miles from campus, down the Vestal Parkway (rt. 434) in the Town...