idp v3 authentication

[Cantor, Scott]

On 3/8/16, 9:54 PM, "dev on behalf of Wenlai Wang" <dev-bounces at shibboleth.net on behalf of w.wang at auckland.ac.nz> wrote:



> 
>In idp v3, it has feature to compose/combine login flows, not sure if it can fit our requirement.

Nobody can answer that but you and the documentation and a lot of experimentation and reading code. The details of how the authentication selection engine works are heavily documented.

> Another solution can be external authentication. Can someone give us suggestion which is the better way for our use case, external authentication or login flows?

First you need to determine if you need to do anything at all, or just use the system as designed.

If you need a custom login method, it's up to you whether you do it with a webflow or an external authentication servlet. Flows require less code and have more access to the internals of the system but require more specialized knowledge.

>Are there any documentations/examples for implementing external authentication or login flows?

Nothing but the code and the wiki.

> 
>In idp v2, it has a helper class HttpServletHelpe which provides access to internal state from servlets. Is there a compatible class in v3?

The internal state of the system is accessed via the ProfileRequestContext and external authentication methods have access to it.

-- Scott