<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body bgcolor="#FFFFFF">
<div><span class="Apple-style-span" style="-webkit-tap-highlight-color: rgba(26, 26, 26, 0.292969); -webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); ">On Jul 25, 2012, at 4:07 PM,
"Me" <<a href="mailto:chris@fdu.edu">chris@fdu.edu</a>> wrote:</span></div>
<blockquote type="cite">
<div>
<div style="font-family: sans-serif; font-size: 16px"><br>
I was hoping to get some clarity on the login process. At what point in a failed login does the IDP send the user back to the SP?
</div>
</div>
</blockquote>
<div><br>
</div>
Nate addressed this. Short of using IsPassive or a protocol issue, rarely.
<div><br>
<blockquote type="cite">
<div>
<div style="font-family: sans-serif; font-size: 16px">Also with htaccess you get a error page when author fails. Do you get the same error page with failed Shibboleth author?</div>
</div>
</blockquote>
<div><br>
</div>
Failed authorization, yes, unless you won't it to control the error response itself instead of the web server. Failed authentication isn't really a "thing" from the SP end. Different error types use various templates for their type of condition.<br>
</div>
<div><br>
</div>
<div>-- Scott</div>
</body>
</html>