<div dir="ltr">Yes, but how do you go about doing that avoiding requiring an exisiting session cookie?<div><br></div><div>I have tried to create a very simple LoginHandler which would simply log the user in if he just goes to the right page, regardless of given input (for test purposes) but it seems the authentication engine still requires an existing cookie</div>
<div><br></div><div>I keep getting "LoginContext key cookie was not present in request" from HttpServletHelper.</div><div><br></div><div>I am probably missing something though I am not sure what. I have browsed through several login handler implementations and Shibboleth's own source code but I keep ending up on the fact that it requires that the user has a cookie setup on his browser.</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On 25 July 2013 16:07, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 7/25/13 9:57 AM, "Byte Flinger" <<a href="mailto:byteflinger@gmail.com">byteflinger@gmail.com</a>> wrote:<br>
><br>
>Yes, although that is not the main issue I believe, if we take an LDAP<br>
>server as an example it would be simple to login the user programatically<br>
>by calling the Unsolicited SSO with the required parameters. The issue<br>
>would be that since the login was done programatically on server side,<br>
>the user browser never sets any cookie which, to my understanding, is<br>
>required by Shibboleth (Though it may be a misconception on my part and<br>
>is only required for the default UserPassword loginhandler).<br>
<br>
</div>You can't get the IdP to consider somebody logged in unless you configure<br>
a login handler. Which one you use and how it works is up to you, but you<br>
can't not have one.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>