Multi-Context Broker functionality in Shibboleth v3 - Comments please.

[IAM David Bantz]

We recently encountered users failing authN 3 times in succession being
returned to the SP and there receiving no useful information.  Arguably the
SP should be smarter and provide a more helpful response to users, but in
fact they merely received a generic error message, triggering support
calls.  I reset the max number of failures to 99 to  In the current
functionality draft this ability (#7 gap) is said to be "determined that
this MCB feature is not needed."  What do you anticipate the user
experience to be in that eventuality?

David Bantz


On Mon, Apr 20, 2015 at 10:03 AM, David Walker <dhwprof at gmail.com> wrote:

>  Everyone,
>
> The Multi-Context Broker project has drafted a strategy for providing MCB
> functionality for Shibboleth v3.  It is available on the Shibboleth wiki at DRAFT
> - Multi-Context Broker Functionality for Shibboleth v3 - DRAFT
> <https://wiki.shibboleth.net/confluence/display/SHIB2/DRAFT+-+Multi-Context+Broker+Functionality+for+Shibboleth+v3+-+DRAFT> .
> Please look it over and send comments to the list.
>
> FYI, you'll find links to various background materials in the draft
> strategy, in particular:
>
>
>    -  Preliminary Gap Analysis for Replicating MCB Functionality in
>    Shibboleth v3
>    <https://wiki.shibboleth.net/confluence/display/SHIB2/Preliminary+Gap+Analysis+for+Replicating+MCB+Functionality+in+Shibboleth+v3>,
>    and
>     - the Multi-Context Broker <https://spaces.internet2.edu/x/BozFAg>
>    overview page on the InCommon Assurance wiki, for those of you who may not
>    be familiar with the Multi-context Broker.
>
>
> Thanks for your help.
>
> David Walker
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150420/5273fbbf/attachment-0001.html>