External Authentication setup issues.

[Peter Schober]

* PARDEE, MARTIN  (MARTIN) <mlp at research.att.com> [2012-05-16 17:22]:
> It seems to me that web.xml is where I need to go to plug in my
> custom "authenticator-invoker" class.  It also seems that
> handler.xml is where I need to tell the IdP that there is a URL to
> use for an operation of type "ExternalAuthn". But I don't see a
> place where I can tell the IdP that an incoming request from a given
> SP should _use_ this new type of authn to resolve the user's
> identity.

The default handler.xml from a current IdP (2.3.6) contains this as an
XML comment:

    <!-- Login handler that delegates the act of authentication to an external system. --> 
    <!-- This login handler and the RemoteUser login handler will be merged in the next major release. -->
    <!--
    <ph:LoginHandler xsi:type="ph:ExternalAuthn">
        <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</ph:AuthenticationMethod>
        <ph:QueryParam name="foo" value="bar" />
    </ph:LoginHandler>
    -->

-peter