Shibboleth IdP 3 External Authn isPassive

[Gary Gwin]

That worked:

     <saml2p:Status>
         <saml2p:StatusCode 
Value="urn:oasis:names:tc:SAML:2.0:status:Requester">
             <saml2p:StatusCode 
Value="urn:oasis:names:tc:SAML:2.0:status:NoPassive"/>
         </saml2p:StatusCode>
         <saml2p:StatusMessage>An error occurred.</saml2p:StatusMessage>
     </saml2p:Status>

Thanks for your help, as always,

Gary

On 12/23/2014 1:01 PM, Cantor, Scott wrote:
> On 12/23/14, 7:48 PM, "Gary Gwin" <ggwin at cafesoft.com> wrote:
>
>> Adding to authn/external-authn-config.xml:
>>
>>          <entry key="NoPassive">
>>              <list>
>>                  <value>Passive authentication request failed</value>
>>              </list>
>>          </entry>
>
> No, you need to map what you set in the handler to the event ID to signal
> out, so the value should be whatever it is you pass out, ideally just
> "NoPassive" itself.
>
>> And setting both:
>>
>> request.setAttribute(ExternalAuthentication.AUTHENTICATION_ERROR_KEY,
>> AuthnEventIds.NO_PASSIVE);
>> request.setAttribute(ExternalAuthentication.AUTHENTICATION_EXCEPTION_KEY,
>> AuthnEventIds.NO_PASSIVE);
>
> You should never set both, and the value of the exception key MUST be an
> exception, which that is not. You want to use the ERROR_KEY.
>
> -- Scott
>

-- 

Gary Gwin
http://www.cafesoft.com

*****************************************************************
*                                                               *
*  Cams is a web single sign-on software solution for Apache,   *
*  IIS, WebLogic, WebSphere, JBoss and Tomcat web servers.      *
*                                                               *
*****************************************************************