defining custom password validator in 3.2.0?

Cantor, Scott cantor.2 at
Mon Dec 14 13:54:58 EST 2015

On 12/14/15, 1:48 PM, "users on behalf of Jeffrey Eaton" <users-bounces at on behalf of jeaton at> wrote:

>I have had to develop a custom password authentication validation routine for my Shibboleth 3.2.0 server.  

I'm not sure that's possible without copying the flow, given the design. It might be, but it wasn't anything I tested. JAAS was the established way to do that.

>which looks to me like it didn't properly load my bean definition.

No, the problem is the flow definition and how it calls that step. You would have to create an alias.

<alias name="MyActionBeanName" alias="ValidateUsernamePassword"/>

That's already done to control which of the three backends is used now. I guess if that works, then it's more or less accomodated and needs to be documented.

-- Scott

More information about the users mailing list