SPNEGO, 3.2, ActivationCondition and SPNEGO-button on login.vm

[Simon Lundström]

Hey!

I'm trying to emulate my old SPNEGO setup that I did with IDP 2.x on
3.2.

We want to achieve:
* Firefox and Safari should automatically try SPNEGO (since they degrade
  gracefully) via ActivationCondition
* On login.vm there should be a button which overrides and tries SPNEGO

This is basically explained how to here[1] BUT since we also have the
User-Agent conditions described first, Internet Explorer won't see the
button since IE doesn't apply for the activation condition (and we don't
want to include IE in it for obvious reasons).

I thought about setting the _idp_krb_enabled cookies via JS when the
button is pressed and then reload the site but that doesn't retrigger
the authentication flow so it won't work.

Any ideas?

1, https://wiki.shibboleth.net/confluence/display/IDP30/SPNEGOAuthnConfiguration#SPNEGOAuthnConfiguration-ExtendingthePasswordLoginFlow

BR,
- Simon

____________________________________

Simon Lundström
Section for Infrastructure

IT Services
Stockholm University
SE-106 91 Stockholm, Sweden

www.su.se/english/staff-info/it