RemoteUser authnMethodHeader example?

[Cantor, Scott]

> Does someone have an usage example for the authnMethodHeader stuff for
> the RemoteUser authentication flow?

If your flow supports a custom AuthnContextClassPrincipal called "urn:foo" then put urn:foo in the header and it will include that in the Subject. That's pretty much it.

Normal example would be when the external flow supports Password and Duo, and you need to signal back which one was used. The flow has to support both so it's triggered correctly, but you turn off the auto-add of the supported principals (which would include both) and drive the result with the header (so it includes only the right one(s)).

-- Scott