different AuthnContextClassRef for different discovered IDP

[marangiom]

Cantor, Scott E. wrote
> On 6/13/16, 10:57 AM, "Cantor, Scott" <

> cantor.2@

> > wrote:
> 
>>> but I cannot find a way to make the SP use the non standard url-pattern
>>
>>It does so automatically. Whatever is requested gets filtered against the
supported methods
>>to pick which one to run.
> 
> Occurred to me...did you actually configure the separately mapped servlets
> to pass back a different AuthnContextClassRef / method in their servlet
> config? IIRC I think that's how it knows what to signal back if you need
> them to signal different values. I think you have to configure it in two
> places, once in the handlers file and once in web.xml.
> 
> -- Scott
> 
> 
> -- 
> To unsubscribe from this list send an email to 

> users-unsubscribe@


YES THAT'S IT!!!

Same Handler can match different authentication method and different
servletURL

-------- handler.xml ---------------
<ph:LoginHandler xsi:type="ph:UsernamePassword" 
                 
jaasConfigurationLocation="file://c:\opt\shibboleth-idp-242/conf/login.config">
       
<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod>
		
    </ph:LoginHandler>
	
	<ph:LoginHandler xsi:type="ph:UsernamePassword" 
                 
jaasConfigurationLocation="file://c:\opt\shibboleth-idp-242/conf/login.config"
authenticationServletURL="/Authn/MyMethod">
   
<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:MyMethod</ph:AuthenticationMethod>
		
    </ph:LoginHandler>

------------------------ web.xml --------------
	    <servlet>
        <servlet-name>UsernamePasswordAuthHandler</servlet-name>
      
<servlet-class>edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet</servlet-class>
        <load-on-startup>3</load-on-startup>
    </servlet>

   <servlet-mapping>
        <servlet-name>UsernamePasswordAuthHandler</servlet-name>
        <url-pattern>/Authn/UserPassword</url-pattern>
    </servlet-mapping>
<servlet>

        <servlet-name>MyMethodAuthHandler</servlet-name>
      
<servlet-class>edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet</servlet-class>
      
	  <init-param>
            <param-name>authnMethod</param-name>
           
<param-value>urn:oasis:names:tc:SAML:2.0:ac:classes:MyMethod</param-value>
        </init-param>
        
        <load-on-startup>3</load-on-startup>
    </servlet>

    <servlet-mapping>
        <servlet-name>MyMethodAuthHandler</servlet-name>
        <url-pattern>/Authn/MyMethod</url-pattern>
    </servlet-mapping>

	<servlet>


thanks scott!
ciao
Marcello






--
View this message in context: http://shibboleth.1660669.n2.nabble.com/different-AuthnContextClassRef-for-different-discovered-IDP-tp7625998p7626163.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.