Silently try more then one login handler with UnsolicitedSSO

[Cantor, Scott]

On 4/29/13 6:08 PM, "Henry B. Hotz" <hotz at jpl.nasa.gov> wrote:

>Some SPs will want to insist on something better than a password.  If I
>don't give them an attribute, and the authenticationMethod is always the
>same, what should I do?  Or is this just another way of saying I need to
>do something custom?  ;-)

If you want one handler to be able to return multiple different context
classes, yes. If you use multiple handlers, as Doug Engert just described,
then it might be avoidable.

In practice, the handler selection machinery and so forth is quite
brittle. I have not found it tremendously useful to use it, and preferred
to just write my own login handler to orchestrate things. It is not
coincidental that V3 will be much more like what people tend to write
themselves than what's there now.

-- Scott