ECP authentication

[Cantor, Scott]

> I'm looking at setting up ECP on our new idp 3.2 config. To clarify,
> does the authentication have to be performed at the webserver (in my
> case tomcat) layer and then passed to the idp in the REMOTE_USER
> environment variable, or is there some way to get the idp itself to do
> the authentication? I'd rather use the kerberos auth I already have
> working in the idp then have to fiddle with tomcat authentication.

You can do basic-auth via the Password flow, same config, nothing to do out of the box. If you need more than Password, that generally breaks.

-- Scott