<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 7/28/2014 4:53 PM, snekse wrote:<br>
</div>
<blockquote
cite="mid:CADy3QzPCHo15hMfNhEZ=1C9BNVN9d+Aodrjm5Un8qGFhJP_Fpg@mail.gmail.com"
type="cite">So I've started trying to implement external
authentication for the IdP.</blockquote>
<br>
I'm assuming you mean "write a custom LoginHandler" as opposed to
implementing <LoginHandler xsi:type="ExternalAuthn">.<br>
<br>
<blockquote
cite="mid:CADy3QzPCHo15hMfNhEZ=1C9BNVN9d+Aodrjm5Un8qGFhJP_Fpg@mail.gmail.com"
type="cite">Looking at Remote User as my baseline, I now see:
<div>
<ul>
<li>RemoteUserAuthServlet</li>
<li>RemoteUserLoginHandler</li>
<li>RemoteUserLoginHandlerBeanDefinitionParser</li>
<li>RemoteUserLoginHandlerFactoryBean</li>
</ul>
<div>I'm just wondering if every Login Handler impl needs all of
these as a hazard of using Spring, or if I'm over complicating
things. </div>
</div>
</blockquote>
<br>
Short answer is - all but the first are essentially required; the
first is not, but is common. This wiki page might be helpful in
understanding those pieces:<br>
<br>
<a
href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler</a><br>
<br>
You can compare the other LoginHandlers in the IdP source and the
Contributions page to see some other patterns (e.g. the X.509 cert
auth handler is a little bit different).<br>
<br>
FWIW, our custom LoginHandler has a LoginHandler and AuthServlet
(the latter of which is actually called from a pair of JSPs, one
that handles username/password and one that handles the Duo second
factor when needed.)<br>
<br>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>