Problem with /idp/AuthnEngine

[Cantor, Scott]

> which results in this
> 
>            <form id="login" action="/idp/AuthnEngine" method="post">
> 
> when I get to that page for authentication.

That's extremely surprising.

> Normally, as you said I would go to /idp/AuthnEngine and get a 302 redirect
> to idp/Authn/UserPassword (that's what happens from other SPs). Here, I
> get a 200 response instead, which leaves me on that page and generates the
> code above which appears not to work.

No, that definitely would not work.

The UsernamePassword handler runs initially in the context of the AuthnEngine URL. That handler does this:

httpResponse.sendRedirect(authnServletUrl);

The servlet lives at /idp/Authn/UserPassword, and then it internally forwards to the JSP page and so forth.

So I don't see how it's possible for it to get that badly confused. I don't recall anything like that coming up before, and FWIW, most of us have a few SPs that use POST to initiate the request.
 
-- Scott