<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Feb 7, 2017 at 2:46 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Without any specific requirements it would try every method, but the first thing you asked about in the log is  evidence of it completing one of those methods.</blockquote></div><br>Going back to an earlier thread...  </div><div class="gmail_extra"><br></div><div class="gmail_extra"><span class="gmail-im" style="font-size:12.8px">>> But be that as it may, assuming you're using RemoteUser, it's documented,<br>>> authMethodHeader.<br>><br></span><span style="font-size:12.8px">> Correction: authnMethodHeader. And of course you would have to set</span><br style="font-size:12.8px"><span style="font-size:12.8px">> the shibboleth.authn.RemoteUser.</span><wbr style="font-size:12.8px"><span style="font-size:12.8px">addDefaultPrincipals bean to FALSE or it's just going</span></div><div class="gmail_extra"><span style="font-size:12.8px">> to circumvent it.</span><br></div><div class="gmail_extra"><span style="font-size:12.8px"><br></span></div><div class="gmail_extra"><span style="font-size:12.8px">I'm seeing what you warned me about previously.</span></div><div class="gmail_extra"><span style="font-size:12.8px"><br></span></div><div class="gmail_extra"><span style="font-size:12.8px">Presumably the stuff in shibboleth-idp/flows/authn needs to be updated to figure this out/</span></div><div class="gmail_extra"><span style="font-size:12.8px"><br></span></div><div class="gmail_extra"><span style="font-size:12.8px">Liam</span></div></div>