How shibboleth idp verify existing session.

[Divya Shirodkar]

Thanks Scott, Even I believe the SSO should work but not sure why It is not
happeneing.

Added:
 1.idp.authn.flows=CustomFlow
 2. Added below snipped in general-authnn.xml (Is is compulsory to add into
external-authn or general-authn.xml will work here?)
  <bean id="authn/CustomFlow" parent="shibboleth.AuthenticationFlow"
    p:nonBrowserSupported="false"
    p:passiveAuthenticationSupported="false"
                p:forcedAuthenticationSupported="false">
  </bean>
 3. Added respective CustomFlow directory in flows\authn\
 4. Added below snipped into my CustomServlet
  try {
   final String key =
ExternalAuthentication.startExternalAuthentication(httpRequest);
   String username = httpRequest.getRemoteUser();
   if (username != null) {
    httpRequest.setAttribute(ExternalAuthentication.SUBJECT_KEY,
getSubject);
   }
   ExternalAuthentication.finishExternalAuthentication(key, httpRequest,
httpResponse);

   } catch (final ExternalAuthenticationException e) {
   throw new ServletException("Error processing external authentication
request", e);
  }

Do you think I am missing anything over here ?



On Thu, Mar 23, 2017 at 7:26 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > 1.User hits application via sp1 ,user asked for authentication and idp
> > session is created.
> > 2.User next hits the application via sp2 and is redirected to idp login
> > page .
>
> The only IdP login page that exists is part of the Password login flow, so
> that's simply not possible unless you're being very imprecise in what
> you're asking about.
>
> > Am I missing out something in External authentication or is it designed
> that way ?
>
> External is identical to everything else, SSO is automatic if the request
> can be satisfied with the old result.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170324/2a3f5d7e/attachment.html>