How to /Authn/RemoteUser with IdP 3.0

Cantor, Scott cantor.2 at
Wed May 27 20:54:07 EDT 2015

On 5/28/15, 12:36 AM, "Kathy E. Wright" <kewrig at> wrote:

>Our config contained trailing spaces after "RemoteUser" in  
>* idp.authn.flows=RemoteUser
>* idp.authn.flows.initial=RemoteUser

You should probably not set idp.authn.flows.initial.

>Extra white spaces are not trimmed from values entered into 

They can't be, we don't know that every possible property ever supported 
would be safe to trim (we don't even control what they are, people can add 
anything they want).

The feedback from the first installation workshop was that spaces are 
tripping people up, so we have to add trimming to the places the 
properties are actually used where it's appropriate.

And I think do better logging of situations where a configured value isn't 
matching something, that should be a strong error.

-- Scott

More information about the users mailing list