Auto-login user programatically?

[Byte Flinger]

Thanks Scott.

If I understand what you mean, I'd need to have a SAML Request come in
first to specify which profile handler to be used which in turn goes to the
login handler but then my question would be, how does the Unsolicited SSO
profile works and can I implement a handler in a similar way (So that no
request is required, the user simply goes to the login page and is logged
in with a SAML Response sent back)?

My guess would be that I need to implement a custom profile handler instead
of a login handler then (or maybe even both)?


On 25 July 2013 18:15, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 7/25/13 12:03 PM, "Byte Flinger" <byteflinger at gmail.com> wrote:
>
> >I have tried to create a very simple LoginHandler which would simply log
> >the user in if he just goes to the right page, regardless of given input
> >(for test purposes) but it seems the authentication engine still requires
> >an existing cookie
> >
> >I keep getting "LoginContext key cookie was not present in request" from
> >HttpServletHelper.
>
> That isn't the session cookie, it's a precondition of using the IdP at
> all. You cannot take the user into the middle of the flow. You must start
> at a profile endpoint, and that will send the user through the AuthnEngine
> and into whatever login handler is configured. There is no way to change
> that requirement.
>
> >I am probably missing something though I am not sure what. I have browsed
> >through several login handler implementations and Shibboleth's own source
> >code but I keep ending up on the fact that it requires that the user has
> >a cookie setup on his browser.
>
> It does, a login context cookie set by a profile handler. That isn't the
> session cookie and has nothing to do with "bypassing" authentication.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130726/435f2a1f/attachment.html