<div dir="ltr">Thanks Christopher.  I think that clears things up for me a bit.  I was thinking my servlet was _also_ supposed to implement the LoginHandler interface.  I misinterpreted this page:<div><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal</a><br>

</div><div><br></div><div>&quot;<span style="color:rgb(51,51,51);font-family:Arial,sans-serif;line-height:20px">Once completed, the custom-developed code must then set the </span><code style="color:rgb(51,51,51);line-height:20px">HttpServletRequest</code><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;line-height:20px"> attributes required by the </span><code style="color:rgb(51,51,51);line-height:20px">edu....idp.authn.LoginHandler</code><span style="color:rgb(51,51,51);font-family:Arial,sans-serif;line-height:20px"> interface</span>&quot;</div>

<div><br></div><div>If I&#39;m understanding you correctly, I just write a plain old servlet, set the attributes, then call AuthenticationEngine#returnToAuthenticationEngine and that&#39;s it.</div></div><div class="gmail_extra">

<br><br><div class="gmail_quote">On Mon, Jul 28, 2014 at 5:11 PM, Christopher Bongaarts <span dir="ltr">&lt;<a href="mailto:cab@umn.edu" target="_blank">cab@umn.edu</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<div class="">On 7/28/2014 4:53 PM, snekse wrote:<br>
</div><div class="">&gt; I&#39;m just wondering if every Login Handler impl needs all of these as a<br>
&gt; hazard of using Spring, or if I&#39;m over complicating things.<br>
&gt;<br>
&gt; If the answer is yes, what else do I need that I&#39;m missing?  Spring<br>
&gt; XML config file?<br>
&gt;<br>
&gt; If it matters....<br>
&gt;<br>
&gt; HANDLER.XML<br>
&gt;     &lt;ph:LoginHandler xsi:type=&quot;ph:ExternalAuthn&quot;<br>
&gt;  externalAuthnPath=&quot;/authn/external/SHSession&quot;<br>
&gt;                      supportsForcedAuthentication=&quot;false&quot;<br>
&gt;                      supportsPassiveAuthentication=&quot;false&quot;<br>
&gt;                      authenticationDuration=&quot;30&quot;&gt;<br>
<br>
</div>Sorry, missed this part.  In that case, your servlet doesn&#39;t need to<br>
implement LoginHandler, it needs to set the request variables that<br>
LoginHandlers use to communicate with the AuthenticationEngine. See IdP<br>
source comments at beginning of<br>
/src/main/java/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.java<br>
for the specifics.<br>
<div class="HOEnZb"><div class="h5"><br>
--<br>
%%  Christopher A. Bongaarts   %%  <a href="mailto:cab@umn.edu">cab@umn.edu</a>          %%<br>
%%  OIT - Identity Management  %%  <a href="http://umn.edu/~cab" target="_blank">http://umn.edu/~cab</a>  %%<br>
%%  University of Minnesota    %%  <a href="tel:%2B1%20%28612%29%20625-1809" value="+16126251809">+1 (612) 625-1809</a>    %%<br>
<br>
</div></div><span class="HOEnZb"><font color="#888888">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br></div>