Basic Authentication on Password flow
Marco Naimoli
marco.naimoli at unipd.it
Wed Dec 14 04:29:48 EST 2016
Hallo, I'd like to disable the "ExtractUsernamePasswordFromBasicAuth"
action from Password flow. I tried disabling ECP from relying-party.xml,
but it didn't solve the problem. I want that IDP asks for password even
if there's a Basic auth active
The fastest way to do it is to comment out the
<action-state id="ExtractUsernamePasswordFromBasicAuth">
from:
system/flows/authn/password-authn-flow.xml
but it's obviously a bad solution.
What is the correct and simpler way to disable this feature (hope it's
not creating a new flow) ?
Thank you
Marco
More information about the users
mailing list