newbie question.

[Cantor, Scott]

On 5/7/12 11:12 AM, "PARDEE, MARTIN  (MARTIN)" <mlp at research.att.com>
wrote:

>I would like to extend this setup so that my IdP uses an external
>authentication service instead of LDAP. I have a ³real² authentication
>service , but rather than go for the highest level of complexity at
>first, I¹d just like to have my external auth service do something like
>look up the Userid in a flat file, and return an Authenticated/Not
>Authenticated indication based on that lookup.

What do you mean by "external" and how are you expecting it to integrate
with the IdP? If you mean you want the login UI and credential UI to be
entirely outside the IdP, then you have a couple of options.

The External login handler in the IdP allows for a basic interaction with
some colocated piece of Java code that does whatever your mechanism wants
and sets some servlet attributes on the way back in.

The other option is to front-end it with something that gets RemoteUser
set, and then the RemoteUser handler bridges that to the IdP.

> 
>Can someone point me to a simple example of this kind of customization,
>or, could someone suggest an article, blog, or web page that would help
>me understand the overall mechanics of this problem?  I have read about
>Login Handlers, IdPAuthExternal, etc. but so far the big picture of what
>I am doing here has not yet come into focus.

You're going to need to explain what you don't understand, but no, there's
nothing out there I'm aware of that isn't going to be out of date at best.

-- Scott