Shibboleth IdP 3 External Authn isPassive

[Gary Gwin]

If ExternalAuthentication.PASSIVE_AUTHN_PARAM = true and an IdP session 
does not exist for the user, what is the correct Shibboleth IdP API 
response to finish the request?

For example, should you set:

request.setAttribute(ExternalAuthentication.PRINCIPAL_NAME_KEY, null);
ExternalAuthentication.finishExternalAuthentication(key, request, response);

Or, just finish without setting the PRINCIPAL_NAME_KEY name?

ExternalAuthentication.finishExternalAuthentication(key, request, response);

Or something else?

Thanks,

Gary

-- 

Gary Gwin
http://www.cafesoft.com

*****************************************************************
*                                                               *
*  Cams is a web single sign-on software solution for Apache,   *
*  IIS, WebLogic, WebSphere, JBoss and Tomcat web servers.      *
*                                                               *
*****************************************************************