Correlating custom login with existing session from different login type

[Byte Flinger]

I currently have a Shibboleth IDP (2.4) with a relying party configured to
use a Login/Password Authentication login handler towards an LDAP server.

I am trying to get a sense of how much work would it be to write a
different custom login module (For example sending a token which is looked
up in a database) so that a user can login via either module and switch to
the other afterwards without losing his existing session.

My guess is, for starters, I'd need to write a custom login handler to get
the login module working however I am uncertain how would I go about making
it somehow correlate with the user existing session from the other other
login module (in this case a username/password login) so SSO still works.

Any input would be appreciated. I am mostly trying to understand how much
work would this take and should it not prove too complicated, how to
roughly go about it.

Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141012/4b6dcc9e/attachment.html