<div dir="ltr"><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif">Hi Daniel,</div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif"><br></div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif">After some effort, I was able to get the ldaptive snapshot you provided working. Relevant sections of authn/ldap-authn-config.xml are as below.</div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif"><br></div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif"><div class="gmail_default"><!-- Bind Search Configuration --></div><div class="gmail_default"> <bean name="bindSearchAuthenticator" class="org.ldaptive.auth.Authenticator" p:authenticationResponseHandlers-ref="authenticationResponseHandler" p:resolveEntryOnFailure="%{idp.authn.LDAP.resolveEntryOnFailure:false}"></div></div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif"><br></div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif">Towards the end of this file.</div><div class="gmail_default" style="font-family:'trebuchet ms',sans-serif"><div class="gmail_default"><!-- add the FreeIPA response handler --></div><div class="gmail_default"><bean id="authenticationResponseHandler" class="org.ldaptive.auth.ext.FreeIPAAuthenticationResponseHandler" /></div><div class="gmail_default"><br></div><div class="gmail_default">Now I'm getting the 20 second delay message when I login even for the passwords that are not due to expire. </div><div class="gmail_default"><br></div><div class="gmail_default"><h3>Your password will be expiring soon!</h3>
<div>
<p>To create a new password now, go to <strong><a href="https://portal.apigee.io/idp/profile/SAML2/Redirect/SSO?execution=e1s2#" target="_blank">#</a></strong>.</p>
<p>Your login will proceed in 20 seconds or you may click <strong><a href="https://portal.apigee.io/idp/profile/SAML2/Redirect/SSO?execution=e1s2&_eventId_proceed=1" target="_blank">here</a></strong>
to continue.</p><p><br></p></div></div><div class="gmail_default">Any settings that I have missed ?</div><div class="gmail_default"><br></div><div class="gmail_default">Thanks.</div><div class="gmail_default">--Prashant</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 3 June 2016 at 09:05, Prashant Bapat <span dir="ltr"><<a href="mailto:prashant@apigee.com" target="_blank">prashant@apigee.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">Hi Scott,</div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif"><br></div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">Yes. I understand. What I meant by the next version is the intercept flow that you had earlier posted about. </div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif"><br></div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">Thanks.</div><span><font color="#888888"><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">--Prashant</div></font></span></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On 2 June 2016 at 19:03, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>> Tried it but got into runtime exceptions. I guess I will have to wait for the<br>
> next version.<br>
<br>
</span>What Daniel's talking about doesn't rely on the next version.<br>
<span><font color="#888888"><br>
-- Scott<br>
</font></span><div><div><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div></div>