Custom authentication and extending the login.jsp element.

[Cantor, Scott]

On 8/31/12 11:35 AM, "PARDEE, MARTIN  (MARTIN)" <mlp at research.att.com>
wrote:
>
>That seems consistent with what I see, I just didn't want to have to
>package my entire authentication app into idp.war.  I am sure you'll
>understand the desire to keep things separated into components.

You would probably want to take that up with the people at Sun that
screwed up the Java + web equation so horribly.

If you don't want to do it inside the system, then look at the RemoteUser
or ExternalAuth options.

>Can you tell me how one should "send control back to Shibboleth"?

Look at the existing servlet that's in the User/Pass handler. You call an
API to return to the authentication engine after setting some attributes
with the information to return with.

>I am uncertain of how login.jsp does this.

It doesn't, the servlet does.

-- Scott