start flow from login.vm

[Andrea Catalano]

I need to migrate a custom authentication handler for shibboleth 2.X to shibboleth 3.X. 

The custom authenticator allows to delegate authentication to an external system (eg facebook, google, another idp). 
On the login page you can authenticate using the login form, or by clicking on a button (faceboook, google, twitter). 
When the user clicks the button he will be redirected to a custom servlet. 
The custom servlet after verifying the authentication on the external system performs the following code: 
AuthenticationEngine.returnToAuthenticationEngine(....) 
and everything works properly (the idp saml send the response to SP). 

On Shibboleth 3 I was able to configure a new External Authentication Handler that sucessfully perform authentication on facebbok or google (using a custom servlet). 
However, the user is always redirected to this type of authentication. I want to display the login form and initialize the external authentication flow only when the user click on a button. 
I need to use MFA similar to "methodChooser" ? 
https://wiki.shibboleth.net/confluence/display/IDP30/MultiFactorAuthnConfiguration#MultiFactorAuthnConfiguration-FullControlOverTransitions 


Andrea 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170316/42ada8c7/attachment.html>