forceAuthn/isPassive in IdPAuthExternal

Ina Müller ina.mueller at zdv.uni-tuebingen.de
Fri Aug 19 14:14:07 BST 2011


how do I configure ExternalAuthnSystemLoginHandler to tell the 
AuthenticationEngine that it supports forceAuthn or isPassive?


2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Processing incoming request
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Beginning user authentication process.
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Existing IdP session available for principal XXX
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Filtering configured LoginHandlers: 
{urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession=edu.internet2.middleware.shibboleth.idp.authn.provider.PreviousSessionLoginHandler at 1b3e1e64, 
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport=edu.internet2.middleware.shibboleth.idp.authn.provider.ExternalAuthnSystemLoginHandler at b3d4535}
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Forced authentication is required, filtering possible login handlers 
accordingly
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Removing LoginHandler 
edu.internet2.middleware.shibboleth.idp.authn.provider.ExternalAuthnSystemLoginHandler, 
it does not support forced re-authentication
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Authentication handlers remaining after forced authentication 
requirement filtering: {}
2011-08-19 15:02:26.530 INFO [e.i.m.s.i.a.AuthenticationEngine] - Force 
authentication requested but no login handlers available to support it
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Returning control to profile handler
2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] - 
Redirecting user to profile handler at 
https://u-003-sshib05.uni-tuebingen.de:443/idp/profile/SAML2/Redirect/SSO

Is there any way to call setSupportsPassive(true) or 
setSupportsForceAuthentication(true) from my servlet configured as 
externalAuthnPath in handler.xml?

Ina


More information about the users mailing list