Shibboleth IdP 3 External Authn isPassive

[Cantor, Scott]

> For example, should you set:
> 
> request.setAttribute(ExternalAuthentication.PRINCIPAL_NAME_KEY, null);
> ExternalAuthentication.finishExternalAuthentication(key, request,
> response);
> 
> Or, just finish without setting the PRINCIPAL_NAME_KEY name?

If you're asking how you signal that you can't authenticate, you can set either the ERROR or EXCEPTION keys. There is no reason to ever set anything to null explicitly, it's already null if it's not set.

-- Scott