Customization of Authentication Request handling

[Aleksandar Likic]

OK, thanks, I'll take a look at the docs. I guess this doesn't change my question on avoiding redirects and having a GUI at the same time, as I described in my recent email.

Thanks,
Aleks

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, February 04, 2014 7:00 PM
To: Shib Users
Subject: Re: Customization of Authentication Request handling



On 2/4/14, 6:33 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 2/4/14, 6:29 PM, "Aleksandar Likic" <aleksandar.likic at securekey.com>
>wrote:
>
>>Hi, I configured Shibboleth with external authentication handler. I 
>>see that the external handler URL is invoked via HTTP redirect. Is it 
>>possible to configure it with HTTP forward instead?
>
>No. The whole point of the mechanism is to integrate with an external 
>SSO system. If the integration isn't external, just build a custom 
>login handler, it's the same amount of work and much safer.

Actually, I'm wrong (and so are you in the original question). The externalAuthnPath *is* a forward, not a redirect. The redirect comes in after that, because presumably you have to go somewhere other than that path to do whatever it is you need to do. If not, then you don't have to.

If what you're seeing is a redirect, then that doesn't fit the code as I recall it or the documentation.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net