shibboleth IDP v3 and RSA secureId integration

[Cantor, Scott]

On 8/18/16 7:54 PM, Joe Edwards wrote:
> 
> I can see how to integrate AuthUser.java into our JAAS module.
> I read that Scott did that years ago.
> 
> My question is: can someone share examples of how to handle the
> AuthSession.NEXT_CODE_REQUIRED and AuthSession.NEW_PIN_REQUIRED
> cases? How do I present the appropriate page to a user?

I considered it non-feasible with JAAS. Had we stayed on RSA, I would
have built a webflow that incorporated the PIN case. I'm not sure
NEXT_CODE is possible to do with a web app, it's session oriented and
holding open a session with the account wouldn't be practical.

So aside from the practicalities on the RSA side, which may make it
impossible, the answer from the IdP side is learn webflow or build your
own servlet and use the External flow.

-- Scott