Notify User/Pass authentication failure to SP

Cantor, Scott cantor.2 at osu.edu
Wed Jun 8 09:25:00 EDT 2016


On 6/8/16, 9:13 AM, "users on behalf of Youssef  GHORBAL" <users-bounces at shibboleth.net on behalf of youssef.ghorbal at pasteur.fr> wrote:
>
> I want to know if it’s possible for the IdP, after X login/pass auth failures, to
> redirect to the requesting SP with a failure message.

No, not unless you build that in. If it's just a basic "count the times and stop" situation, that's not too hard, and you could certainly put in a request for that.

The signaling is entirely built-in, it just never stops looping back to the form at the moment.

What's in Jira now is really phrased in terms of lockout and that's not something I'm comfortable including at this point, or possibly ever.

-- Scott





More information about the users mailing list