<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>I've combined support for previous session and authentication into a single login handler. Given that combination, my handler has to handle passive session requests in its role as handling previous session. I've got this all working ok, but Shib still
throws an exception when the user does not have a previous session and hence I can't authenticate them. Something like this:</div>
<div><br>
</div>
<div>
<div>14:54:31.448 - INFO [com.clareity.jaguar.shibboleth.authn.ClareityLoginHandler:237] - [http-172.16.14.246-16380-1:] - Passive authentication requested without a valid SSO session. Returning SAML error to </div>
<div>SP [http://www.narrpr.com]</div>
<div>14:54:31.450 - ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:549] - [http-172.16.14.246-16380-1:] - Error returned from login handler for authentication method urn:oasis:names:</div>
<div>tc:SAML:2.0:ac:classes:Password:</div>
<div>Passive authentication not supported without a previous session.</div>
<div>14:54:31.459 - ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:517] - [http-172.16.14.246-16380-1:] - Authentication failed with the error:</div>
<div>edu.internet2.middleware.shibboleth.idp.authn.AuthenticationException: Passive authentication not supported without a previous session.</div>
<div> at edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.validateSuccessfulAuthentication(AuthenticationEngine.java:551) [shibboleth-identityprovider-2.1.5-slo7.jar:na]</div>
<div> at edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.completeAuthentication(AuthenticationEngine.java:503) [shibboleth-identityprovider-2.1.5-slo7.jar:na]</div>
</div>
<div><br>
</div>
<div>Now, everything seems to work ok, but I feel I must be missing something in how I convey the reason for the failure to Shib. I'm seeing the error message in the appropriate attribute and thats what the AuthenticationEngine keys on to throw the exception.</div>
<div><br>
</div>
<div>So, am I doing this right?</div>
<div><br>
</div>
<div>thanks,</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
</body>
</html>