How deep is the IdPAuthExternal hole?

[snekse]

Thanks Christopher.  I think that clears things up for me a bit.  I was
thinking my servlet was _also_ supposed to implement the LoginHandler
interface.  I misinterpreted this page:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal

"Once completed, the custom-developed code must then set the
HttpServletRequest attributes required by the edu....idp.authn.LoginHandler
 interface"

If I'm understanding you correctly, I just write a plain old servlet, set
the attributes, then call AuthenticationEngine#returnToAuthenticationEngine
and that's it.


On Mon, Jul 28, 2014 at 5:11 PM, Christopher Bongaarts <cab at umn.edu> wrote:

> On 7/28/2014 4:53 PM, snekse wrote:
> > I'm just wondering if every Login Handler impl needs all of these as a
> > hazard of using Spring, or if I'm over complicating things.
> >
> > If the answer is yes, what else do I need that I'm missing?  Spring
> > XML config file?
> >
> > If it matters....
> >
> > HANDLER.XML
> >     <ph:LoginHandler xsi:type="ph:ExternalAuthn"
> >  externalAuthnPath="/authn/external/SHSession"
> >                      supportsForcedAuthentication="false"
> >                      supportsPassiveAuthentication="false"
> >                      authenticationDuration="30">
>
> Sorry, missed this part.  In that case, your servlet doesn't need to
> implement LoginHandler, it needs to set the request variables that
> LoginHandlers use to communicate with the AuthenticationEngine. See IdP
> source comments at beginning of
>
> /src/main/java/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.java
> for the specifics.
>
> --
> %%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
> %%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
> %%  University of Minnesota    %%  +1 (612) 625-1809    %%
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140728/0f1580f8/attachment.html