Shibboleth Developers

["Scott Cantor" <>]

> I'm using form based authentication and JSP to authenticate a user's login

> details via a RADIUS server, only once the user has been authenticated I 
> can't leapfrog back into to the main IdP process of generating the 
> Authentication Assertion. I was hoping there was some way to call or 
> trigger the doGet() method described within IdPResponder.java from a JSP 
> page.

What you're describing isn't how Shibboleth works now. It relies on the
container for authentication. If you write code that is explicitly doing
authentication, then you would have have to generate the required
container-level security information and then redirect to the servlet with
an AuthnRequest message as usual.

As an example, when I implemented IdP SSO across a cluster via a cookie, I
did so by changing the SSO handler code in Shibboleth to retrieve the
principal identity from either REMOTE_USER or a local cookie. There was no
way to do that with the code unmodified. I think you're in a similar
situation.

If there's a hack that can do what you're describing, I don't know it but
perhaps somebody else might.

-- Scott