Question concerning Authentication Method

[Brewer, Edward L]

Scott,

If I were to change the External login handler to use urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified  auth method vice PasswordProtectedTransport, then configure the one and only SP that needs this login handler (currently) to only use this external login handler... could I have some level of success?  Also considering that the SP is an internal application that I have some level of control over.

Thanks for your time,
Lee Brewer

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, July 08, 2014 2:13 PM
To: Shib Users
Subject: Re: Question concerning Authentication Method

On 7/8/14, 2:49 PM, "Brewer, Edward L" <lee.brewer at Vanderbilt.Edu> wrote:
>So, in general I am wondering how
> you can force a SP to use a specific login handler if they both use 
>the same auth method?

Basically you can't.

V3 authentication flows have a generic predicate property for injecting rules that go beyond that kind of criteria so that people can hack up crazy, complex stuff to their heart's content, but V2 will never have that, it's selection engine is extremely limited.

So the answer to this question like most in V2 is that you need a custom login handler.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net