Shibboleth IdP 3 External Authn isPassive

[Gary Gwin]

Setting either the AUTHENTICATION_ERROR_KEY or 
AUTHENTICATION_EXCEPTION_KEY result in response Status:

     <saml2p:Status>
         <saml2p:StatusCode 
Value="urn:oasis:names:tc:SAML:2.0:status:Requester">
             <saml2p:StatusCode 
Value="urn:oasis:names:tc:SAML:2.0:status:AuthnFailed"/>
         </saml2p:StatusCode>
         <saml2p:StatusMessage>An error occurred.</saml2p:StatusMessage>
     </saml2p:Status>

The only difference is that AUTHENTICATION_ERROR_KEY logs a local WARN 
message. Is there a way to signal in the response that authn failed 
because of a AuthnEventIds.NO_PASSIVE event?

Thanks,

Gary

On 12/22/2014 6:11 PM, Cantor, Scott wrote:
>> For example, should you set:
>>
>> request.setAttribute(ExternalAuthentication.PRINCIPAL_NAME_KEY, null);
>> ExternalAuthentication.finishExternalAuthentication(key, request,
>> response);
>>
>> Or, just finish without setting the PRINCIPAL_NAME_KEY name?
>
> If you're asking how you signal that you can't authenticate, you can set either the ERROR or EXCEPTION keys. There is no reason to ever set anything to null explicitly, it's already null if it's not set.
>
> -- Scott
>

-- 

Gary Gwin
Cafesoft
858.268.5100 x501
http://www.cafesoft.com

*****************************************************************
*                                                               *
*  Cams is a web single sign-on software solution for Apache,   *
*  IIS, WebLogic, WebSphere, JBoss and Tomcat web servers.      *
*                                                               *
*****************************************************************