Issues creating custom login handler
Manuel Haim
haim at hrz.uni-marburg.de
Tue Jul 9 10:03:05 EDT 2013
Hi,
> I am trying to create a custom login handler
for a starting point, you could give our custom login handler a try (and
see what files are needed for your login handler to work):
http://www.staff.uni-marburg.de/~haimm/unimr-login.shib2.2011_11_21.zip
It is a combination of the default UsernamePassword login handler and
the SSO login handler with the following additions:
a) When doing forceAuthn, you can login under a different name (the
previous login is destroyed).
b) For kiosk machines (detected by IP address), it shows an additional
"Guest login" button.
c) The IP address of the user is added to the session's
publicCredentials (for use in attribute resolution, but please take care
of this Security Advisory:
http://shibboleth.internet2.edu/secadv/secadv_20110718.txt).
d) The user can deactivate SSO when he logs in (this is done by
combining the PreviousSession and UsernamePassword login handler to just
one login handler which handles both). This way, the user will be asked
to log in again for each SP. This option may also train our current
users to understand what SSO means (as by now, without Shibboleth, they
still need to log in to each single web application).
e) As we have multiple user bases, the user can choose the domain he
belongs to when logging in (e.g. "staff" or "students").
-Manuel
More information about the users
mailing list