Shibboleth IdP 3 External Authn isPassive

[Cantor, Scott]

On 12/23/14, 7:48 PM, "Gary Gwin" <ggwin at cafesoft.com> wrote:

>Adding to authn/external-authn-config.xml:
>
>         <entry key="NoPassive">
>             <list>
>                 <value>Passive authentication request failed</value>
>             </list>
>         </entry>

No, you need to map what you set in the handler to the event ID to signal 
out, so the value should be whatever it is you pass out, ideally just 
"NoPassive" itself.

>And setting both:
> 
>request.setAttribute(ExternalAuthentication.AUTHENTICATION_ERROR_KEY, 
>AuthnEventIds.NO_PASSIVE);
>request.setAttribute(ExternalAuthentication.AUTHENTICATION_EXCEPTION_KEY, 
>AuthnEventIds.NO_PASSIVE);

You should never set both, and the value of the exception key MUST be an 
exception, which that is not. You want to use the ERROR_KEY.

-- Scott