Scott,<br><br>I am trying to go through the option (1) by deploying multiple login handlers, and specify AuthnContextClassRef in the request.<br><br>I want to use different UserNamePassword Handler for both SPs. Can I define something like:<br>
<br><ph:LoginHandler xsi:type="ph:<span style="background-color:rgb(204,0,0)">UsernamePassword</span>" <br> jaasConfigurationLocation="file://C:\opt\shibboleth-idp/conf/<span style="background-color:rgb(204,0,0)">login.config</span>"><br>
<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod><br> </ph:LoginHandler><br> <br> <ph:LoginHandler xsi:type="ph:<span style="background-color:rgb(204,0,0)">UsernamePasswordLDAP</span>" <br>
jaasConfigurationLocation="file://C:\opt\shibboleth-idp/conf/<span style="background-color:rgb(204,0,0)">loginLDAP.config</span>"><br> <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</ph:AuthenticationMethod><br>
</ph:LoginHandler><br><br>But I don't know how to specify it in AuthnContextClassRef. After reading the docuemnt, seems like AuthnContextClassRef only accept things like:<br> <span style="font-size:xx-small;color:#008000;font-family:Lucida Console"><span style="font-size:9pt;color:green;font-family:'Lucida Console'" lang="FR">urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</span></span><br clear="all">
<br>Am I missing anything?<br><br>Is there a sample configuration that I can refer to?<br><br>Also is it possible to config it so IdP knows that all the AuthnReqeust that comes from SP1 will use LoginHandler1. So we don't need to specify it in the request any more.<br>
<br>Thanks,<br>Yaowen<br>
<br><br><div class="gmail_quote">On Thu, Aug 16, 2012 at 10:55 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 8/16/12 1:49 PM, "Yaowen Tu" <<a href="mailto:yaowen.tu@gmail.com">yaowen.tu@gmail.com</a>> wrote:<br>
><br>
>Thanks folks. Looks like there are two ways to achieve it:<br>
<br>
</div>There are almost certainly a dozen ways. We're just identifying the most<br>
obvious ones.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br>