ExternalAuth confusing

[Cantor, Scott]

On 3/25/13 11:12 PM, "dominic" <apchee.chen at gmail.com> wrote:

>My thought regarding ExternalAuth is that login.jsp is likely located
>somewhere differently from on IdP itself. It seems it is incorrect.

There is no JSP unless you want one. If you want a basic JSP login
mechanism, use the one that comes with the IdP.

>Could you please tell me where I can find the material about the
>LoginHandler rules.

In the javadoc primarily.

https://build.shibboleth.net/nexus/service/local/repositories/releases/arch
ive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-i
dentityprovider-2.3.8-javadoc.jar/!/index.html

Basically, you need to do what's sitting right in the Javadoc for the
ExternalAuthnSystemLoginHandler
class.

-------
This login handler will forward the user-agent to a context-relative path
and include the following request
 * attributes: {@link #FORCE_AUTHN_PARAM}, {@link #PASSIVE_AUTHN_PARAM},
{@link #AUTHN_METHOD_PARAM}, and
 * {@link #RELYING_PARTY_PARAM}.
 * 
 * The external authentication system invocation Fileter/Servlet/JSP must,
upon completion of authentication, set the
 * appropriate {@link HttpServletRequest} attributes, as described by the
 * {@link edu.internet2.middleware.shibboleth.idp.authn.LoginHandler}
interface and then invoke
 * {@link 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine#returnTo
AuthenticationEngine(HttpServletRequest, HttpServletResponse)}
 * 
--------


-- Scott