<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 8/22/2013 4:18 PM, Brewer, Edward L
wrote:<br>
</div>
<blockquote
cite="mid:986FC1CB53E9F24A8FBD3623AB56559716558A@ITS-HCWNEM105.ds.vanderbilt.edu"
type="cite"><span style="color:#1F497D">*</span>One possibility
would be to use two login handlers, one configured for LDAP1
(default) and one for LDAP2 (selectable with a particular
<span style="color:#1F497D">*</span>authentication method you
dream up). Then ask the new app to request that authentication
method (or define a separate RelyingParty for them with
<span style="color:#1F497D">*</span>that as their default auth
method). <br>
<br>
<span style="color:#1F497D">I thought I could, but I was having a
hard time figuring out how that would work. Currently I have
two login handlers configured.. one of type UserPassword and the
other PreviousSession. So, can I create another login handler
like UserPassord.. with a different login config file? How
would I add it to the handler.xml?</span></blockquote>
<br>
See <a
href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass</a>
for specifics and gotchas:<br>
<br>
Duplicate the existing UserPassword login handler definition, and
change the jassConfigurationLocation attribute to the alternate
configuration file (this is the part I'm not sure about since I
don't use it myself, there might be issues with this...) and change
the AuthenticationMethod element content to be the alternate name
you make up (since it's a URI, using
<a class="moz-txt-link-freetext" href="https://www.vanderbilt.edu/shibboleth/authmethods/xxxxx">https://www.vanderbilt.edu/shibboleth/authmethods/xxxxx</a> might be a
good name). Use this name in your RelyingParty for the rogue SP in
the defaultAuthMethod attribute. The wiki page also says you might
need an "init" parameter to the servlet definition in web.xml if you
want your made-up auth method identified in the SAML response to the
SP.<br>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>