<div dir="ltr">I guess what is not clear to me is whether or not Shibboleth puts up the login page and passes the credentials to the external authentication system.</div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Dec 30, 2014 at 5:12 PM, Nate Klingenstein <span dir="ltr"><<a href="mailto:ndk@internet2.edu" target="_blank">ndk@internet2.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">
Robert,
<div><br>
</div>
<div>
<div><span class="">
<blockquote type="cite">
<div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
1. Can my authentication process display a login page for the user in their browser?</div>
</div>
</blockquote>
<div><br>
</div>
</span><div>As long as you can honor the SAML rules of forced authentication and is passive, I think it would be fine. Note well the must here.</div>
<div><br>
</div>
<div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthExternal</a></div><span class="">
<br>
<blockquote type="cite">
<div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
2. After I have authenticated the user, where can I find the LoginHandler interface and what does it mean to invoke <code>edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine#returnToAuthenticationEngine(HttpServletRequest,HttpServletResponse</code>.?</div>
</div>
</blockquote>
</span></div>
<br>
</div>
<div>I’ve heard that this interface is much easier to implement. I think it’s closer to the basis for IdPv3, as well.</div>
<div><br>
</div>
<div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/Multi-Context+Broker" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/Multi-Context+Broker</a></div>
<div><br>
</div>
<div>But, basically, you just set CGI variables and then invoke the IdP at the right path.</div>
<div><br>
</div>
<div>Hope this helps,</div>
<div>Nate.</div>
</div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div>