Problem with /idp/AuthnEngine

[Cantor, Scott]

> The difference then must be the path that they enter. Google Apps and
> others are coming in using SAML2/Redirect/SSO, while Microsoft is using
> SAML2/POST/SSO.

The same thing happens after that step.

> With further testing, it appears that the Kerberos login which is
> located on the same page works as well.

If you mean something like SPNEGO, there's basically a 100% chance that it's at fault if you're asking for my opinion.

> When the form is submitted, it attempts to post to /idp/AuthnEngine. Is this
> normal, or should the login handler be pushing me to a different URL?

I can only tell you what the login handlers that we support do, and AFAIK, none of them POST to that URL. I believe they servlet-forward there internally after they're done working to complete the process, which the client doesn't see.

-- Scott