How to Send SAMLResponse for authentication failure.
Nate Klingenstein
ndk at internet2.edu
Tue Mar 5 02:47:50 EST 2013
Vineeth,
This is the default behavior; if the IdP can't authenticate the user with any login handler in a given context, it will send a failure back to the SP in a SAMLResponse.
My guess is that you want an authentication failure *within* a login handler (like an invalid username/password against an LDAP directory) to result in a SAMLResponse error rather than just telling the user that the authentication failed and they should try again. If my guess is right, then you will need to write a custom login handler. It can be almost identical; just change the exception handling.
Thanks,
Nate.
On 5 Mar 2013, at 07:24, vineeth <vineeth at arubanetworks.com> wrote:
> I want to send SAMLResponse for user authentication failure back to my SP.
>
>
> Can somebody help me how to configure my shibboleth IDP to achieve the same.
>
>
>
>
>
> --
> View this message in context: http://shibboleth.1660669.n2.nabble.com/How-to-Send-SAMLResponse-for-authentication-failure-tp7585093.html
> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>
More information about the users
mailing list