Returning failure for isPassive

[Paul Hethmon]

Here's what I do:

// check for an isPassive request
        if (loginContext.isPassiveAuthRequired() == true) {
        	log.info("Passive authentication requested without a valid SSO
session. Returning SAML error to SP [{}]",
loginContext.getRelyingPartyId());
        	PassiveAuthenticationException pae = new
PassiveAuthenticationException("Passive authentication not supported
without a previous session.");
        
	httpRequest.setAttribute(LoginHandler.AUTHENTICATION_EXCEPTION_KEY, pae);
        	// send them back with a SAML error, we can't support passive
without a prior session
            AuthenticationEngine.returnToAuthenticationEngine(httpRequest,
httpResponse);
            return;
        }

Paul



On 10/29/12 2:47 PM, "Christopher Bongaarts" <cab at umn.edu> wrote:

>If an SP requests isPassive, and my login handler determines that it
>cannot proceed without user interaction, what should it do (codewise)?
>
>Tried looking around the IdP source but didn't see any examples there.
>-- 
>%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
>%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
>%%  University of Minnesota    %%  +1 (612) 625-1809    %%
>--
>To unsubscribe from this list send an email to
>dev-unsubscribe at shibboleth.net