Question concerning Authentication Method

[Cantor, Scott]

On 7/8/14, 4:18 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:
>
>>If I were to create new login handler wouldn't it still be (since that is
>>how it works ) a passwordprotectedtransport auth method and I would be
>>back to square one?
>
>No, because that handler is Java code, so you can make it do anything you
>want to dispatch the user to whatever logic you care to use. It's an extra
>layer of indirection.

(And I'm not saying this is trivial, I don't think I ever have. I'm just
saying it's about all there is if you don't want to fork the method
string.)

Note, I think also you might be able to use an External handler and then
build off of that. It has access to the requesting SP inside the servlet
you plug in as the external auth path, so that's essentially another way
of building a custom handler without as much boilerplate, but it's still
Java work.

-- Scott