authentication failure reasons in IdP logs

[Cantor, Scott]

On 6/21/14, 11:12 PM, "Robert Lowe" <robertmlowe at rmlowe.com> wrote:
>
>I created a precedence so that password
>failures would trump invalid username errors, so I could respond with the
>"best" message possible.
>
>You mean ³best² in terms of log messages right?

No.

>Presumably it'd be considered bad practice to distinguish between these
>two cases in the response to the user?

Users and our help desk would definitely disagree with that.

-- Scott