multiple authentication backends.

[Cantor, Scott]

On 10/8/18, 11:52 AM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:
> Maybe I chose my words poorly.  Our legacy SSO chooses an authentication backend depending on user input.

That doesn't fit my definition of parallel, which would mean "at the same time".

> I would like to handle the different backends with different IDPs, but may need to replicate the existing behavior for
> now.

Multiple back ends is only easy with JAAS, you can define multiple application configurations in JAAS and set up each one in the IdP with an activation condition that would be able to examine inputs and decide whether to attempt it.

Without JAAS there are not a lot of good options, the configuration has no real support for multiple different types of password validators at once, and doesn't make it easy to copy and clone the password flow itself.

-- Scott