Custom UserPassword Authentication

[Cantor, Scott]

> the servlet to forward to login page? or the external login handler pointing
> to an external servlet that calls to our external service?

A servlet is whatever you want it to be or do, I'm not telling you how it should work. If you don't have something that already works properly, you'll spend way more time screwing around trying to build something than if you just built a JAAS module.

> Is there any example you can point me?

The existing IdP codebase and the login handlers it comes with [1], the documentation on the External handler in the wiki [2], open source JAAS modules that are certainly around the net [3].

-- Scott

[1] http://svn.shibboleth.net/view/java-shib-idp2/branches/REL_2/src/main/java/edu/internet2/middleware/shibboleth/idp/authn/provider/

[2] https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal

[3] http://svn.shibboleth.net/view/extensions/java-jaas-securid/