<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "><span><br></span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; ">Scott,</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Thanks. Appreciate the pointers. </div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style:
normal; ">Please bear with me on this as 'am slowly catching up.</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">First, its very encouraging to know that with external auth handler, 'dont have to touch any</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">of the Shib (except config files) so 'dont break anything (functionality).</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york',
times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Thanks for the Java docs, very helpful. </div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Now coming to my situation, this is what 'see (hope this helps some future newbies too :)</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Appreciate if any can confirm the flow (seq of steps)</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;
"><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">1. Step one: configure the handler.xml so that URI to EA is setup.</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><table border="0" cellpadding="0" cellspacing="0" style="font-size: 13px; line-height: 1.2em !important; color: rgb(51, 51, 51); border: 0px !important; margin: 0px !important; padding: 0px !important; clear: left; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; outline: 0px !important; overflow: visible
!important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: 852px; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; min-height: inherit !important; "><tbody style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-size: 1em
!important; min-height: inherit !important; "><tr style="font-size: 1em !important; line-height: 1.2em !important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; min-height: inherit !important; "><td class="code" style="font-size: 1em !important; line-height: 1.2em !important; margin: 0px !important; padding: 0px !important; vertical-align: baseline !important; border: 0px dashed !important; overflow: visible
!important; border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; outline: 0px !important; position: static !important; right: auto !important; top: auto !important; width: 852px; box-sizing: content-box !important; min-height: inherit !important; "><div class="container" title="Hint: double-click to select code" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px
!important; overflow: visible !important; padding: 0px 0px 0px 0em !important; position: relative !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-size: 1em !important; min-height: inherit !important; white-space: pre-wrap !important; "><div class="line number1 index0 alt2" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em 0px 0em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline
!important; width: auto !important; box-sizing: content-box !important; font-size: 1em !important; min-height: inherit !important; "><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0,
0) !important; "><</code><code class="xml keyword" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-weight: bold !important; font-size: 1em !important; min-height: inherit !important; color: rgb(51, 102, 153) !important; ">ph:LoginHandler</code> <code class="xml color1"
style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(128, 128, 128) !important; ">xsi:type</code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important;
border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0, 0) !important; ">=</code><code class="xml string" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image:
none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 51, 102) !important; ">"ph:ExternalAuthn"</code></div><div class="line number2 index1 alt1" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important;
float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em 0px 0em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-size: 1em !important; min-height: inherit !important; "><code class="xml spaces" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static
!important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; "> </code><code class="xml color1" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important;
top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(128, 128, 128) !important; ">externalAuthnPath</code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important;
box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0, 0) !important; ">=</code><code class="xml string" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New',
Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 51, 102) !important; ">"/authn/external"</code></div><div class="line number3 index2 alt2" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em 0px 0em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-size: 1em !important; min-height: inherit !important; "><code class="xml spaces" style="border-top-left-radius: 0px
!important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; "> </code><code class="xml color1" style="border-top-left-radius: 0px !important; border-top-right-radius:
0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(128, 128, 128) !important; ">supportsForcedAuthentication</code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important;
border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0, 0) !important; ">=</code><code class="xml string" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important;
bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 51, 102) !important; ">"true"</code> <code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important;
line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0, 0) !important; ">></code></div><div class="line number4 index3 alt1" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important;
overflow: visible !important; padding: 0px 1em 0px 0em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-size: 1em !important; min-height: inherit !important; "><code class="xml spaces" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important;
font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; "> </code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em
!important; min-height: inherit !important; color: rgb(0, 0, 0) !important; "><</code><code class="xml keyword" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-weight: bold !important; font-size: 1em !important; min-height: inherit !important; color: rgb(51, 102, 153)
!important; ">ph:AuthenticationMethod</code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0, 0) !important;
">>urn:oasis:names:tc:SAML:2.0:ac:classes:_What_should_go_here_</</code><code class="xml keyword" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-weight: bold !important; font-size: 1em !important; min-height: inherit !important; color: rgb(51, 102, 153) !important;
">ph:AuthenticationMethod</code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0, 0) !important; ">></code></div><div class="line number5 index4 alt2"
style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px 1em 0px 0em !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-size: 1em !important; min-height: inherit !important; "><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px
!important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0, 0) !important; "></</code><code class="xml keyword" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto
!important; line-height: 1.2em !important; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-weight: bold !important; font-size: 1em !important; min-height: inherit !important; color: rgb(51, 102, 153) !important; ">ph:LoginHandler</code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 1.2em !important; margin: 0px
!important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-size: 1em !important; min-height: inherit !important; color: rgb(0, 0, 0) !important; ">></code></div></div></td></tr></tbody></table></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Since 'am using external auth, what class should go in the above? I am _not_ using user-passwords here.</div><div
style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">what is the significance of the authenticationmethod <span style="background-color: transparent; ">field here?</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">2. Add the <span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; ">shibboleth-identityprovider.jar to the EA and have the function/action</span></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;
"><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; "> </span>edu.internet2.middleware.shibboleth.idp.authn.</div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">AuthenticationEngine#returnToAuthenticationEngine(HttpServletRequest,HttpServletResponse);</div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">after user authenticates or fails.</div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;
"> </div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 13px; font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-style: normal; "><font face="Verdana, Geneva, Helvetica, Arial, sans-serif" size="2">3. When EA is invoked :</font></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 13px; font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-style: normal; "><font face="Verdana, Geneva, Helvetica, Arial, sans-serif" size="2"><div style="font-size: 13px; background-color: transparent; "> 3a: set session/request attribute: PRINCIPAL_KEY to user_id (at the minimum)</div><div style="font-size: 13px; background-color: transparent; "> AUTHENTICATION_METHOD_KEY : to the URI of EA</div><div
style="font-family: 'times new roman', 'new york', times, serif; font-size: medium; background-color: transparent; "><font face="Verdana, Geneva, Helvetica, Arial, sans-serif" size="2"> AUTHENTICATION_INSTANT_KEY to current timestamp if successful or </font><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; "><font face="Verdana, Geneva, Helvetica, Arial, sans-serif" size="2">
-1 if authentication fails?</font></div><div style="background-color: transparent; font-size: 13px; "><font face="Verdana, Geneva, Helvetica, Arial, sans-serif" size="2"> </font></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; background-color: transparent; "><font face="Verdana, Geneva, Helvetica, Arial, sans-serif" size="2"> AUTHENTICATION_ERROR_KEY : to any error if auth. fails?</font></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style:
normal; "><font face="Verdana, Geneva, Helvetica, Arial, sans-serif" size="2"> </font><span style="color: rgb(53, 56, 51); font-size: 1.3em; background-color: transparent; ">SUBJECT_KEY : ???</span></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><font face="Verdana, Geneva, Helvetica, Arial, sans-serif" size="2">and call </font><span style="background-color: transparent; ">returnTo</span><span style="background-color: transparent; ">AuthenticationEngine(HttpServletRequest,HttpServletResponse);</span></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px;
background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><span style="background-color: transparent; "><br></span></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; ">Not sure of subject_key, appreciate if any one can give me an example of a basic case to fill in/bind</div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; ">those attributes. [basic case: say 'have user-id, name, possibly email addr of the principal and nothing else]</div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><br></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px;
background-color: transparent; color: rgb(0, 0, 0); font-style: normal; ">Here, if auth fails at EA, should the EA set error_key and leave everything else?</div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><br></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; ">Thanks again, 'am almost getting up to speed here.</div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><br></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; ">best regards</div><div style="font-family: Verdana, Geneva, Helvetica, Arial,
sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><span style="background-color: transparent; "><br></span></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><span style="background-color: transparent; "><br></span></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><br></div><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; background-color: transparent; color: rgb(0, 0, 0); font-style: normal; "><span style="background-color: transparent; "><br></span></div></font></div> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "> <div style="font-family: 'times new roman', 'new york', times, serif;
font-size: 12pt; "> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> </font></div><div id="yiv547087782"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "><pre>
<span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">On 9/22/12 11:41 AM, "C G" <</span><a href="http://shibboleth.1660669.n2.nabble.com/user/SendEmail.jtp?type=node&node=7582023&i=0" target="_top" rel="nofollow" link="external" style="font-size: 13px; color: rgb(85, 26, 139); font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; white-space: normal; ">[hidden email]</a><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">> wrote: </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">> </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family:
Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">> </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">>However, it is not clear what session variables need to be set by the </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">>Ext auth to indicate whether auth failed or succeeded? </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana,
Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">"Once completed, the custom-developed code must then set the </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">HttpServletRequest attributes required by the </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">edu.internet2.middleware.shibboleth.idp.authn.LoginHandler interface and </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal;
">invoke </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine#returnTo </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">AuthenticationEngine(HttpServletRequest,HttpServletResponse." </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal;
"><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">Did you refer to the documentation for that interface? </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><a href="https://build.shibboleth.net/nexus/service/local/repositories/releases/arch" target="_top" rel="nofollow" link="external" style="font-size: 13px; color: rgb(85, 26, 139); font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; white-space: normal; ">https://build.shibboleth.net/nexus/service/local/repositories/releases/arch</a><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal;
">ive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-i </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">dentityprovider-2.3.8-javadoc.jar/!/index.html </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">There are also multiple examples in the source or in the contrbutions page </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial,
sans-serif; font-size: 13px; white-space: normal; ">to look at that interact with the engine. </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">>And what is the lib (jar) that includes this api/func rettoautheng </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">> that 'need to drop in EA web app? </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica,
Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">shibboleth-identityprovider </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">>c) Pls confirm that in this sceneario, no code is needed to be tweaked in </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space:
normal; ">>Shib Idp? </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">>Just only the config xml files? </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">And adding your custom files to the container in the same or other </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">context, since I
think that's the only way you can pick up the session </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">attributes set by the ExternalAuth handler. It says they're attributes, </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">not parameters, so that means that URL is something in the container. </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; "><span style="font-family: Verdana, Geneva, Helvetica, Arial,
sans-serif; font-size: 13px; white-space: normal; ">-- Scott </span><br style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; white-space: normal; ">
<b><font size="+1"><br><br><br></font></b>
</pre></div></div></div><br> </div> </div> </div></body></html>