fail authentication when attribute is not available?

[Olga Terlyga]

I guess I want to fail the request, not necessarily authentication. I will take a look at ContextCheckInterceptConfiguration.

We use Kerberos for initial authentication, if that changes anything.

Thank you,
Olga.


________________________________
From: users <users-bounces at shibboleth.net> on behalf of Peter Schober <peter.schober at univie.ac.at>
Sent: Wednesday, November 16, 2016 10:18:35 AM
To: users at shibboleth.net
Subject: Re: fail authentication when attribute is not available?

* Cantor, Scott <cantor.2 at osu.edu> [2016-11-16 17:14]:
> Failing authentication and failing specific requests are different
> and you have to be aware of what you want.

Right, thanks for pointing that out.

> Failing authentication itself requires custom development or more
> likely would be handled with the MFA flow in 3.3.

I meant to write that failing authentication should be done by the
authentcation sytem/method used. For LDAP that might be a more complex
LDAP search filter, etc., but the OP didn't mention what specifically
they was using other than "not LDAP".
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161116/3d59560a/attachment.html>