Idp3 Authentication, own method

[Cantor, Scott]

On 9/15/15, 7:33 AM, "users on behalf of Jukka Hakosalo" <users-bounces at shibboleth.net on behalf of jhakosal at gmail.com> wrote:

>We are starting to test Idp3. Our product Idp is version 2. In Idp2 we use Radius authentication.

Somebody asked me about that recently, and I was somewhat puzzled by the use case. Why would you use an insecure protocol vs. just connecting to the actual service(s) the RADIUS server is talking to? Just curious.

> Authentication method is written in java and uses Radius libraries. Tomcat's form authentication calls that method.

Tomcat natively, or JAAS?

>We'd like to use basically the same code in Idp3. Should we use external authentication or can we use auth/Password login flow? Actual authentication code would then be in bean file.

Depends on the answer to the previous question. A JAAS module is directly compatible between the two. You can't use the Password flow unless you have a JAAS module. You could copy and extend it with an additional "back end" to RADIUS I suppose. Or External. Or a brand new flow. There are many ways.

-- Scott