forceAuthn/isPassive in IdPAuthExternal

[Chad La Joie]

No, it's a bug.  Those options didn't get added to the config, please
go ahead and file it.

On Fri, Aug 19, 2011 at 09:14, Ina Müller
<ina.mueller at zdv.uni-tuebingen.de> wrote:
> how do I configure ExternalAuthnSystemLoginHandler to tell the
> AuthenticationEngine that it supports forceAuthn or isPassive?
>
>
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Processing incoming request
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Beginning user authentication process.
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Existing IdP session available for principal XXX
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Filtering configured LoginHandlers:
> {urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession=edu.internet2.middleware.shibboleth.idp.authn.provider.PreviousSessionLoginHandler at 1b3e1e64,
> urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport=edu.internet2.middleware.shibboleth.idp.authn.provider.ExternalAuthnSystemLoginHandler at b3d4535}
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Forced authentication is required, filtering possible login handlers
> accordingly
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Removing LoginHandler
> edu.internet2.middleware.shibboleth.idp.authn.provider.ExternalAuthnSystemLoginHandler,
> it does not support forced re-authentication
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Authentication handlers remaining after forced authentication
> requirement filtering: {}
> 2011-08-19 15:02:26.530 INFO [e.i.m.s.i.a.AuthenticationEngine] - Force
> authentication requested but no login handlers available to support it
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Returning control to profile handler
> 2011-08-19 15:02:26.530 DEBUG [e.i.m.s.i.a.AuthenticationEngine] -
> Redirecting user to profile handler at
> https://u-003-sshib05.uni-tuebingen.de:443/idp/profile/SAML2/Redirect/SSO
>
> Is there any way to call setSupportsPassive(true) or
> setSupportsForceAuthentication(true) from my servlet configured as
> externalAuthnPath in handler.xml?
>
> Ina
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered