<html><head></head><body bgcolor="#FFFFFF"><div>Thanks Scott ; appreciate your inputs very much <br><br><br></div><div><br>On Oct 1, 2012, at 9:32 AM, C G <<a href="mailto:ci_98yr@yahoo.com">ci_98yr@yahoo.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; ">Greetings!</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Have a shib-IDP with an external authentication integrated.</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "><br></div><div style="background-color: transparent; ">My requirement is: to post back the authentication result to SP (service provider)</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">_even when
authentication fails_. What do 'need to configure or tweak so that </div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">after returning to <span style="background-color: transparent; font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; ">AuthenticationEngine.returnToAuthenticationEngine(request, response); </span><span style="background-color: transparent; "> </span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "> Shib-IDP posts back the result to SP and not take back the user to login page?</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Of course, will set the <span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; ">attribute </span><a href="https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-identityprovider-2.3.8-javadoc.jar/!/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.html#AUTHENTICATION_ERROR_KEY" style="color: rgb(76, 107, 135); text-decoration: none; font-family: Arial, Helvetica, sans-serif; font-size: 12px; "><code style="font-size: 1.2em; ">LoginHandler.AUTHENTICATION_ERROR_KEY</code></a><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; "> to some error condition besides</span></div><div style="font-family:
monospace; font-size: 1.2em; color: rgb(76, 107, 135); background-color: transparent; font-style: normal; "><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; ">setting </span><a href="https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-identityprovider-2.3.8-javadoc.jar/!/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.html#SUBJECT_KEY" style="color: rgb(76, 107, 135); text-decoration: none; font-family: Arial, Helvetica, sans-serif; font-size: 12px; "><code style="font-size: 1.2em; ">LoginHandler.SUBJECT_KEY</code></a><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; ">, </span><a href="https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-identityprovider-2.3.8-javadoc.jar/!/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.html#PRINCIPAL_KEY" style="color: rgb(76, 107, 135); text-decoration: none; font-family: Arial, Helvetica, sans-serif; font-size: 12px; "><code style="font-size: 1.2em; ">LoginHandler.PRINCIPAL_KEY</code></a><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; ">, [which user failed auth].</span></div><div style="font-family: monospace; font-size: 1.2em; color: rgb(76, 107, 135); background-color: transparent; font-style: normal; "><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; "><br></span></div><div style="font-family: Arial, Helvetica, sans-serif; font-size: 12px; color: rgb(53, 56, 51); background-color:
transparent; font-style: normal; "><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; ">In my case SP will decide how to handle failed auth case.</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Appreciate if any one can shed some wisdom words on this. Thanks in advance.</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><br></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">Some details:</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; ">As per the API documentation </div><h4 style="font-size: 1.3em; background-color: rgb(222, 227, 233); border-top-width: 1px; border-top-style: solid; border-top-color: rgb(158, 173, 192); border-bottom-width: 1px; border-bottom-style: solid; border-bottom-color: rgb(158, 173, 192); margin: 0px 0px 6px -8px; padding: 2px 5px; color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; ">validateSuccessfulAuthentication</h4><div style="font-family:
Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal; "><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; "> An authentication is considered successful if no error is bound to the request attribute </span><a href="https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-identityprovider-2.3.8-javadoc.jar/!/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.html#AUTHENTICATION_ERROR_KEY" style="text-decoration: none; color: rgb(76, 107, 135); font-family: Arial, Helvetica, sans-serif; font-size: 12px; "><code style="font-size: 1.2em; ">LoginHandler.AUTHENTICATION_ERROR_KEY</code></a><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; "> and there is a value for at least
one of the following request attributes: </span><a href="https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-identityprovider-2.3.8-javadoc.jar/!/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.html#SUBJECT_KEY" style="text-decoration: none; color: rgb(76, 107, 135); font-family: Arial, Helvetica, sans-serif; font-size: 12px; "><code style="font-size: 1.2em; ">LoginHandler.SUBJECT_KEY</code></a><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; ">, </span><a href="https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-identityprovider-2.3.8-javadoc.jar/!/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.html#PRINCIPAL_KEY" style="text-decoration: none; color: rgb(76, 107, 135); font-family:
Arial, Helvetica, sans-serif; font-size: 12px; "><code style="font-size: 1.2em; ">LoginHandler.PRINCIPAL_KEY</code></a><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; ">, or </span><a href="https://build.shibboleth.net/nexus/service/local/repositories/releases/archive/edu/internet2/middleware/shibboleth-identityprovider/2.3.8/shibboleth-identityprovider-2.3.8-javadoc.jar/!/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.html#PRINCIPAL_NAME_KEY" style="text-decoration: none; color: rgb(76, 107, 135); font-family: Arial, Helvetica, sans-serif; font-size: 12px; "><code style="font-size: 1.2em; ">LoginHandler.PRINCIPAL_NAME_KEY</code></a><span style="color: rgb(53, 56, 51); font-family: Arial, Helvetica, sans-serif; font-size: 12px; ">.</span> <br></div><div style="font-family: monospace; font-size: 1.2em; color: rgb(76, 107, 135); background-color: transparent; font-style: normal;
"><br></div><div style="font-family: monospace; font-size: 19px; color: rgb(76, 107, 135); background-color: transparent; font-style: normal; "><br></div><div style="font-family: monospace; font-size: 19px; color: rgb(76, 107, 135); background-color: transparent; font-style: normal; "><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; "> [case of auth success is straightforward --thanks to</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; "><div style="font-family: Verdana, Geneva, Helvetica, Arial, sans-serif; font-size: 13px; "><a href="http://shibboleth.1660669.n2.nabble.com/Forwarding-authentication-request-error-404-ExternalAuth-SOLVED-td7310618.html#a7316204" target="_top" rel="nofollow" link="external" style="color: rgb(85, 26, 139); font-size: 1em;
">http://shibboleth.1660669.n2.nabble.com/Forwarding-authentication-request-error-404-ExternalAuth-SOLVED-td7310618.html#a7316204</a> ]</div><br class="Apple-interchange-newline"></div></div><br class="Apple-interchange-newline"></div> </div></div></blockquote></body></html>