xternal Authentication - how to set the authentication method in principal of the subject

[iljkr at tiscali.it]

  We are working on a External Authentication on shib idp4, following
this
page:
https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631607/ExternalAuthnConfiguration

We
have setting idp.authn.External.addDefaultPrincipals to false, to avoid
the default method from being automatically set.

We get this error
after authentication:

SAML response reported an IdP error.
Error from
identity provider:
Status:
urn:oasis:names:tc:SAML:2.0:status:Requester
Sub-Status:
urn:oasis:names:tc:SAML:2.0:status:NoAuthnContext
Message: An error
occurred.

Quoting the documentation: "...but you can return the
specific method used at runtime in the Subject."

Operationally
speaking, how do we set the authentication method we implemented before
calling ExternalAuthentication.finishExternalAuthentication?

Adding a
particular principal to the subject added to the request:


request.setAttribute(ExternalAuthentication.SUBJECT_KEY,new
Subject(false, principals, Collections.EMPTY_SET,
Collections.EMPTY_SET));

but in particular what kind of principal, with
what name? 

Thanks.  


VOUCHER CONNETTIVITÀ per P.IVA e PMI: internet a canone 0 per 48 mesi. ATTIVA ORA
 https://casa.tiscali.it/promo/?u=https://promozioni.tiscali.it/voucher_business/?r=TS00000A00025&dm=link&p=tiscali&utm_source=tiscali&utm_medium=link&utm_campaign=voucherbusiness&wt_np=tiscali.link.footermail.voucherbusiness.btb..

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20230124/4efe7777/attachment.htm>