How deep is the IdPAuthExternal hole?

Christopher Bongaarts cab at umn.edu
Mon Jul 28 18:11:27 EDT 2014


On 7/28/2014 4:53 PM, snekse wrote:
> I'm just wondering if every Login Handler impl needs all of these as a 
> hazard of using Spring, or if I'm over complicating things.
>
> If the answer is yes, what else do I need that I'm missing?  Spring 
> XML config file?
>
> If it matters....
>
> HANDLER.XML
>     <ph:LoginHandler xsi:type="ph:ExternalAuthn"
>  externalAuthnPath="/authn/external/SHSession"
>                      supportsForcedAuthentication="false"
>                      supportsPassiveAuthentication="false"
>                      authenticationDuration="30">

Sorry, missed this part.  In that case, your servlet doesn't need to 
implement LoginHandler, it needs to set the request variables that 
LoginHandlers use to communicate with the AuthenticationEngine. See IdP 
source comments at beginning of 
/src/main/java/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.java 
for the specifics.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%



More information about the users mailing list