Shibboleth IdP 3 External Authn isPassive

[Gary Gwin]

Adding to authn/external-authn-config.xml:

         <entry key="NoPassive">
             <list>
                 <value>Passive authentication request failed</value>
             </list>
         </entry>

And setting both:
 
request.setAttribute(ExternalAuthentication.AUTHENTICATION_ERROR_KEY, 
AuthnEventIds.NO_PASSIVE);
request.setAttribute(ExternalAuthentication.AUTHENTICATION_EXCEPTION_KEY, AuthnEventIds.NO_PASSIVE);

didn't change the response result. If that's a configuration/coding 
error, please let me know. Otherwise, no biggie given your "nothing much 
checks second level statuses" guidance.

Thanks,

Gary

On 12/23/2014 11:57 AM, Cantor, Scott wrote:
> On 12/23/14, 6:31 PM, "Gary Gwin" <ggwin at cafesoft.com> wrote:
>>
>> The only difference is that AUTHENTICATION_ERROR_KEY logs a local WARN
>> message. Is there a way to signal in the response that authn failed
>> because of a AuthnEventIds.NO_PASSIVE event?
>
> It shouldn't be necessary because nothing much checks second level
> statuses, but yes, you can signal an error message or exception message
> that you classify in authn/external-authn-config.xml as the NoPassive
> event. That should map by default to that status result in errors.xml
>
> None of that is very well tested.
>
> -- Scott
>

-- 

Gary Gwin
http://www.cafesoft.com

*****************************************************************
*                                                               *
*  Cams is a web single sign-on software solution for Apache,   *
*  IIS, WebLogic, WebSphere, JBoss and Tomcat web servers.      *
*                                                               *
*****************************************************************