Custom Remote User Handler

[Christopher Bongaarts]

Unfortunately the OP is trying to support Google Apps as the SP, which 
does not have any mechanism for requesting a particular auth mechanism 
(last I checked).

Other Chris:  I think your options are either to set up multiple Google 
Apps domains, each pointing at a separate IdP, or you will have to write 
a custom login handler.   I was able to do the latter by basically 
cut-and-pasting the RemoteUser login handler code and tweaking it to do 
what I wanted (basically have two endpoints selectable based on the 
requested AuthnContext, and to populate the response AuthnContext based 
on which was used).

If you share a little more detail about what exactly you're trying to 
achieve functionally, we could probably suggest more precise strategies 
for you.

On 3/6/2012 9:55 AM, Chad La Joie wrote:
> A single instance maps to one URL.  You may deploy multiple instances
> of it but you must give each one a unique authentication mechanism
> identifier.
>
> On Tue, Mar 6, 2012 at 10:52, Christopher Bland<chris at fdu.edu>  wrote:
>> I am not sure if your misunderstanding me or I'm misunderstanding you but
>> let me rephrase my question.  Can the REMOTE_USER servlet be configured to
>> support/authenticate for more than one URL?


-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%