X509 Authn behind Apache proxy

[Cantor, Scott]

On 7/27/17, 12:18 PM, "users on behalf of Ian Bobbitt" <users-bounces at shibboleth.net on behalf of ibobbitt at globalnoc.iu.edu> wrote:

> I got jumping from the authn/Password flow to authn/X509 working, but I would like to let the user jump back to the
> start of authn/Password too. Is there a reason the autn/X509 flow starts off redirecting you to an outside jsp rather
> than a normal Spring view?

Both exist (there's an X509Internal flow), the reason is to account for the need to cover the entire URL space of the IdP to get the authentication happening, whereas redirecting to a JSP confines it to that specific location. That has implications for SSO and so forth.

> Incidentally, the stock x509-prompt.jsp links to a URL in the SHIB2 document tree
> (https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPassLoginPage) for how to customize it.

Can you file a bug please?

-- Scott