apache2/idp kerberos RemoteUserInternal with Password flow fallback

[Raffael Sahli]

On 05/19/2015 02:35 PM, Cantor, Scott wrote:
> On 5/19/15, 3:57 AM, "Raffael Sahli" <sahli at gyselroth.com> wrote:
>> I'm not sure if I understand the wiki part correctly, but I should call
>> it with _eventId_authn/RemoteUser ?
> Yes.
>
>> Did I miss something?
>>
>>
>> idp.properties:
>>
>> idp.authn.flows           = RemoteUser|Password
>> idp.authn.flows.initial  = Password
> Why are you using the initial flow feature? That's not going to work with a button to run the other flow, only the single initial flow is active during that stage. Just comment it out.
Because then I get the RemoteUser flow immediately (right after
redirection from the sp) instead the Password flow.
How can I configure it to always execute the Password flow first and the
RemoteUser flow only with the _eventId_authn param?
 


> -- Scott
>


-- 
Raffael Sahli

gyselroth™ – Agentur für Brand Identity und Digital Media.
Albisriederstrasse 226
8047 Zürich
Switzerland

+41 44 404 22 44

sahli at gyselroth.com
http://www.gyselroth.com