<div dir="ltr"><blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex" class="gmail_quote"><span style="font-family:arial,sans-serif;font-size:12.8000001907349px">I don't know what "internal login web service" you're referring to, you mean the example login form?</span></blockquote><div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;display:inline">Yes, that's what I meant</div> </div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span style="font-size:12.8000001907349px">The protected path should be /idp/Authn/RemoteUser, same as in V2. How you protect that is not in scope of our documentation. That URL will include parameters, so your system has to ensure that if the user is redirected somewhere else to login, that the URL they come back to includes the parameters.</span><br></blockquote><div> </div><div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;display:inline">Is this the reason for this error after changing to idp.authn.flows property to "RemoteUser": </div>ERROR [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:271] - Profile Action SelectAuthenticationFlow: No potential flows left to choose from, authentication will fail<div class="gmail_default" style="font-family:verdana,sans-serif;display:inline">. </div></div><div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;display:inline"><br></div></div><div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;display:inline">Thank you,</div></div><div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;display:inline">Kathy</div></div>
</div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Mar 22, 2015 at 4:39 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 3/22/15, 4:15 PM, "Kathy E. Wright" <<a href="mailto:kewrig@clemson.edu">kewrig@clemson.edu</a>> wrote:<br>
<br>
>directly does successfully redirect to our external SSO but I haven't figured out how to make this the default from the doc instructions.<br>
<br>
</span>The protected path should be /idp/Authn/RemoteUser, same as in V2. How you protect that is not in scope of our documentation. That URL will include parameters, so your system has to ensure that if the user is redirected somewhere else to login, that the URL they come back to includes the parameters.<br>
<span class=""><br>
>When I test authentication with an SP I am redirected to the IdP's internal login web service so I know I've missed some steps in my set-up.<br>
<br>
</span>I don't know what "internal login web service" you're referring to, you mean the example login form?<br>
<br>
Using the RemoteUser method alone primarily requires changing the idp.authn.flows property from "Password" to "RemoteUser". If "Password" isn't included in the property expression, there's no way for the form to be appearing.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr">
<p><font face="verdana, sans-serif">Infrastructure & Ops<br></font><span style="font-family:verdana,sans-serif;font-size:small">CCIT, 340 Computer Court<br></span><span style="font-family:verdana,sans-serif;font-size:small">Anderson, SC 29625<br></span><a href="mailto:kewrig@clemson.edu" style="font-family:verdana,sans-serif;font-size:small" target="_blank">kewrig@clemson.edu</a><u><br></u><span style="font-family:verdana,sans-serif;font-size:small">(864) 656-8133</span></p></div></div>
</div>