apache2/idp kerberos RemoteUserInternal with Password flow fallback

Raffael Sahli sahli at gyselroth.com
Tue May 19 08:50:50 EDT 2015

On 05/19/2015 02:35 PM, Cantor, Scott wrote:
> On 5/19/15, 3:57 AM, "Raffael Sahli" <sahli at gyselroth.com> wrote:
>> I'm not sure if I understand the wiki part correctly, but I should call
>> it with _eventId_authn/RemoteUser ?
> Yes.
>> Did I miss something?
>> idp.properties:
>> idp.authn.flows           = RemoteUser|Password
>> idp.authn.flows.initial  = Password
> Why are you using the initial flow feature? That's not going to work with a button to run the other flow, only the single initial flow is active during that stage. Just comment it out.
Because then I get the RemoteUser flow immediately (right after
redirection from the sp) instead the Password flow.
How can I configure it to always execute the Password flow first and the
RemoteUser flow only with the _eventId_authn param?

> -- Scott

Raffael Sahli

gyselroth™ – Agentur für Brand Identity und Digital Media.
Albisriederstrasse 226
8047 Zürich

+41 44 404 22 44

sahli at gyselroth.com

More information about the users mailing list