External authentication

[Cantor, Scott]

On 11/13/15, 4:31 PM, "dev on behalf of Nanda Kumar" <dev-bounces at shibboleth.net on behalf of NKK at FISCHERINTERNATIONAL.COM> wrote:



>In the servlet everything under the Inputs section can be read from the HttpRequest.
>How is the output expected?
>How should the items listed under the Outputs section passed back to the IdP?

Both the inputs and outputs are request attributes, mostly because of compatibility with the way V2 did it, so people would have to change less code.

The input attributes are available to the servlet after startExternalAuthentication() is called, and the output attribute(s) need to be set before finishExternalAuthentication() is called.

-- Scott