How to Send SAMLResponse for authentication failure.

Nate Klingenstein ndk at internet2.edu
Tue Mar 5 02:47:50 EST 2013


Vineeth,

This is the default behavior; if the IdP can't authenticate the user with any login handler in a given context, it will send a failure back to the SP in a SAMLResponse.

My guess is that you want an authentication failure *within* a login handler (like an invalid username/password against an LDAP directory) to result in a SAMLResponse error rather than just telling the user that the authentication failed and they should try again.  If my guess is right, then you will need to write a custom login handler.  It can be almost identical; just change the exception handling.

Thanks,
Nate.

On 5 Mar 2013, at 07:24, vineeth <vineeth at arubanetworks.com> wrote:

> I want to send SAMLResponse for user authentication failure back to my SP.
> 
> 
> Can somebody help me how to configure my shibboleth IDP to achieve the same.
> 
> 
> 
> 
> 
> --
> View this message in context: http://shibboleth.1660669.n2.nabble.com/How-to-Send-SAMLResponse-for-authentication-failure-tp7585093.html
> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 




More information about the users mailing list