Overriding authentication method for an SP

[Wessel, Keith]

Liam was partially right. I was missing the double open and close curley brackets.

However, now I'm getting what Scott suggested I'd get: can't convert java.util.String to java.security.principal. I'll go digging for an example using a SAML2 authenticationContextClassRef.

So, yes, the docs are right.

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, December 12, 2016 4:29 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Overriding authentication method for an SP

On 12/12/16, 5:07 PM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

>    You might have a syntax error... our version looks like this...
>    
>   
>    p:defaultAuthenticationMethods="#{{'urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken'}}"

Is that working? I wouldn't expect it to, but Spring is weird at times. It's not really right.

> Our ADFS folks want Duo enabled for their Shib integration. Following the V3 relying party docs, I added this bean to my
> relying-party.xml:

That should not be what the docs say, the type of that property is List<Principal>. The values you need to supply aren't Strings, they're Principals, typically beans that inherit from shibboleth.AuthnContextClassRefPrincipal or shibboleth.AuthenticationMethodPrincipal (latter being SAML 1).

I've done examples that certainly show that approach, maybe there are some broken examples.

-- Scott


-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net