Customization of Authentication Request handling

[Cantor, Scott]

On 2/4/14, 6:33 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 2/4/14, 6:29 PM, "Aleksandar Likic" <aleksandar.likic at securekey.com>
>wrote:
>
>>Hi, I configured Shibboleth with external authentication handler. I see
>>that the external handler URL is invoked via HTTP redirect. Is it
>>possible to configure it with HTTP forward instead?
>
>No. The whole point of the mechanism is to integrate with an external SSO
>system. If the integration isn't external, just build a custom login
>handler, it's the same amount of work and much safer.

Actually, I'm wrong (and so are you in the original question). The
externalAuthnPath *is* a forward, not a redirect. The redirect comes in
after that, because presumably you have to go somewhere other than that
path to do whatever it is you need to do. If not, then you don't have to.

If what you're seeing is a redirect, then that doesn't fit the code as I
recall it or the documentation.

-- Scott