separating AuthenticationMethod contexts

[Russell Beall]

Thanks for all the responses Scott and Chad :-)

Currently I have a bit of a workaround implemented where the one SP that has this requirement can request the context and also it will use forceAuthn so that other authentication methods will not trigger the PreviousSession handler.  The authenticationDuration on this context is set to 5 seconds so that a user would have to be really quick to share it with some other SP.  The one use case that isn't handled is where I might like to share that context with a group of SPs for 20 minutes or so, but not share that context with the rest of the SPs that use the defaults.

I've gotten to the point where it has become fairly apparent that I need a custom login handler if I need to go further with these fine-grained requirements.

Regards,
Russ.

On Jun 11, 2012, at 7:30 AM, Cantor, Scott wrote:

> On 6/11/12 10:10 AM, "Chad La Joie" <lajoie at itumi.biz> wrote:
> 
>> Well, currently, it's working as intended. The default method was
>> designed only as an input to the process of selecting the authn method
>> to use when it was decided authentication was required.
> 
> I'm working on improving the docs a bit, but I also think the last couple
> of paragraphs in the method selection doc are wrong. They kind of imply
> exactly the behavior that it isn't manifesting, so we'll work on it.
> 
> -- Scott
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net