authentication failure reasons in IdP logs

[Robert Lowe]

> I created a precedence so that password
> failures would trump invalid username errors, so I could respond with the
> "best" message possible.
>

You mean “best” in terms of log messages right?

Presumably it'd be considered bad practice to distinguish between these two
cases in the response to the user?

-- 
Best regards,

Robert Lowe
http://crepuscular.rmlowe.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140622/79ab7082/attachment.html