IDP3/4 -> read (&write) custom session cookie for authentication

[Cantor, Scott]

On 6/25/20, 12:57 PM, "users on behalf of Käfer Thomas" <users-bounces at shibboleth.net on behalf of thomas.kaefer at fh-campuswien.ac.at> wrote:

> There I found the HttpServletRequestResponseContext which I was able to use like this:

Use the bean we provide to access that class. It's essentially the same but you're depending on things we may change.

> Is there a way to ask Shibboleth to get the user to enter a username+password set for verification out of such a
> AuthFunction?

No, this feature is for programmatic authentication only. It can't involve a UI. That's a more complex task requiring the MFA flow for the orchestration to call the Password and Function steps at the appropriate points.

That's reaching beyond what I can do for free on list (see list footer for why).

-- Scott