Failed logins

[Nate Klingenstein]

Chris,

Depends on the parameters of the AuthnRequest and on exactly how and  
why login fails, but generally speaking, with a failed authentication  
attempt and a properly configured IdP using username/password  
authentication, the user will get a Credentials not recognized error  
on the page.  If they're not in possession of valid login credentials,  
they may get stuck there.  Proper help desk/password reset/etc.  
information

For external and REMOTE_USER authentication, it's really up to the  
authentication mechanism.  They can pass the user back to Shibboleth  
with no authentication and the user will get passed back to the SP  
with the error.  The SP will present it, and the user will typically  
be stranded there.

The SP will rarely be able to better help the user authenticate at the  
IdP than the IdP will, so it's great if the IdP provides the user with  
the necessary resources in the case that they fail to authenticate  
successfully.

Take care,
Nate.

On Jul 25, 2012, at 20:07 , Me wrote:

> Hello all,
>
> I was hoping to get some clarity on the login process.  At what  
> point in a failed login does the IDP send the user back to the SP?   
> Also with htaccess  you get a error page when author fails. Do you  
> get the same error page with failed Shibboleth author?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120725/8234680b/attachment.html