external authentication -shib IdP tutorial and config and working mode

[Cantor, Scott]

On 9/22/12 11:41 AM, "C G" <ci_98yr at yahoo.com> wrote:
>
>
>However, it is not clear what session variables need to be set by the
>Ext auth to indicate whether auth failed or succeeded?

"Once completed, the custom-developed code must then set the
HttpServletRequest attributes required by the
edu.internet2.middleware.shibboleth.idp.authn.LoginHandler interface and
invoke 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine#returnTo
AuthenticationEngine(HttpServletRequest,HttpServletResponse."


Did you refer to the documentation for that interface?

https://build.shibboleth.net/nexus/service/local/repositories/releases/arch
ive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-i
dentityprovider-2.3.8-javadoc.jar/!/index.html

There are also multiple examples in the source or in the contrbutions page
to look at that interact with the engine.

>And what is the lib (jar) that includes this api/func rettoautheng
> that 'need to drop in EA web app?

shibboleth-identityprovider


>c) Pls confirm that in this sceneario, no code is needed to be tweaked in
>Shib Idp?
>Just only the config xml files?

And adding your custom files to the container in the same or other
context, since I think that's the only way you can pick up the session
attributes set by the ExternalAuth handler. It says they're attributes,
not parameters, so that means that URL is something in the container.

-- Scott