forceAuthn/isPassive in IdPAuthExternal
Ina Müller
ina.mueller at zdv.uni-tuebingen.de
Fri Aug 19 14:14:07 BST 2011
how do I configure ExternalAuthnSystemLoginHandler to tell the
AuthenticationEngine that it supports forceAuthn or isPassive?
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Processing incoming request
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Beginning user authentication process.
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Existing IdP session available for principal XXX
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Filtering configured LoginHandlers:
{urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession=edu.internet2.middleware.shibboleth.idp.authn.provider.PreviousSessionLoginHandler at 1b3e1e64,
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport=edu.internet2.middleware.shibboleth.idp.authn.provider.ExternalAuthnSystemLoginHandler at b3d4535}
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Forced authentication is required, filtering possible login handlers
accordingly
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Removing LoginHandler
edu.internet2.middleware.shibboleth.idp.authn.provider.ExternalAuthnSystemLoginHandler,
it does not support forced re-authentication
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Authentication handlers remaining after forced authentication
requirement filtering: {}
2011-08-19 15:02:26.530 INFO [e.i.m.s.i.a.AuthenticationEngine] - Force
authentication requested but no login handlers available to support it
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Returning control to profile handler
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
Redirecting user to profile handler at
https://u-003-sshib05.uni-tuebingen.de:443/idp/profile/SAML2/Redirect/SSO
Is there any way to call setSupportsPassive(true) or
setSupportsForceAuthentication(true) from my servlet configured as
externalAuthnPath in handler.xml?
Ina
More information about the users
mailing list