jaas authentication failover

[Cantor, Scott]

On 3/26/19, 12:56 PM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

> Defining multiple backends in a single configuration using "sufficient" is not doing what I expect.

Sufficient means "first one that works is good enough", it's a simple chain. Or you can do the same thing with the configuration out of the box by just including a list of multiple application names from the JAAS configuration with one module defined in each one; that's equivalent to sufficient but with more precise error message mapping.

If you need something else, then you would have to be more specific about the requirements.

Liam