Authentication Fail-over

[Cantor, Scott]

> Is it possible to configure authentication such that -- if JAAS
> authenticationfails - authentication is via LDAP?

As Nate said, you should use chained JAAS modules for this. You don't need to create one JAAS config, you can supply the IdP with multiple application labels to use, with separate JAAS modules in each one, and it will try them separately, and allow for custom error message mappings based on the individual modules.

-- Scott