SPNEGO and _eventId_authn/SPNEGO button

Cantor, Scott cantor.2 at osu.edu
Wed Mar 19 12:03:59 UTC 2025


> So close. This broke forceAuthn sadly so I had to work
> around that:

Well, of course, but that's true no matter what. I don't think either RemoteUser  or SPNEGO can be said to support ForceAuthn in general, though the former depends on what it's doing. SPNEGO definitely does not, ever. The paradox of ForceAuthn, the stronger the authentication, often the less it can support that feature.

It's your IdP of course, but there's a reason they both default to not supporting it.

> Is there a way to “reuse” the logic and “inject”
> authn/RemoteUser or authn/SPNEGO as an argument
> somehow somewhere?

I don't really follow what you're doing enough to say, but if you mean in some Javasript sense, I'm no expert with it.

SUNET is a menber through NORDUnet, so I'm willing to help in a member support capoacity but not really here.

-- Scott




More information about the users mailing list