timeouts in jaas.config

[Cantor, Scott]

On 10/22/20, 1:57 PM, "users on behalf of IAM David Bantz" <users-bounces at shibboleth.net on behalf of dabantz at alaska.edu> wrote:

>    ShibUserPassAuth {

Yes, that's how *not* to do it. That's one application, and you have to create two, and configure the IdP to use both using a bean that names them both. The default is just to use the collection of a single section by that name.

>    If the module returns failed authentication because of an expired account or other conditions, the second module is
> exercised.

That may be, but that's not up to us, that's up to JAAS. The IdP can only make it work when it controls the sequencing.

-- Scott