jaas authentication failover

[Cantor, Scott]

On 3/27/19, 10:26 AM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote:

> Is there information on mapping the error messages returned by the JAAS module to text that we to show our users?

Password flow documentation, Errors and Warnings. The examples already come shipped with several mapped messages that are turned into error messages on the login page.

> Any pointers on choosing a JAAS configuration based on the principal name?
 
Given a basic understanding of how to install scripted or Java functions, you have to satisfy whatever function return type is specified for a given feature. That one is somewhat nasty as a return structure. But the documentation is full of examples of scripts that do various things as Condition or Function beans. The MFA defaults include relatively non-trivial scripted function examples, though with simple string return values.

The other side of the problem is knowing how to access a given piece of information, and that part is more tractable to simply answer. The username entered by the client is in ProfileRequestContext -> AuthenticationContext -> UsernamePasswordContext, going from memory at least.

-- Scott