Multiple Credential Requirements

[Scott Battaglia]

Andrew was leading you in the right direction.  Depending on what you need
to do, you may be able to
   (a) create a custom Credentials class (i.e.
CertificateAndPasswordCredentials),
   (b) create a CredentialsBinder that can retrieve a certificate from a
Request
   (c) modify the view to only accept a password
   (d) plug all of the above into the existing AuthenticationViaForm

If you need something more complicated then that, you may need to do as
Andrew suggested.  But again, its based on what your requirements are ;-)

-Scott



On 6/13/07, Andrew R Feller <afelle1 at lsu.edu> wrote:
>
> Afternoon Dusty,
>
> You should be able to create your own custom class that extends
> org.springframework.webflow.action.FormAction and insert it into the
> login webflow.  Perhaps you can insert your form action between the
> bindAndValidate and sendTicketGrantingTicket actions and have it
> authenticate your additional credentials before it handled username and
> password?  What are some scenarios where this will be used and what
> requirements have been placed upon this?
>
> HTH,
> A-
>
> Andrew R Feller, Analyst
> Subversion Administrator
> University Information Systems
> Louisiana State University
> afelle1 at lsu.edu
> (office) 225.578.3737
> -----Original Message-----
> From: cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu]
> On Behalf Of Dusty Burwell
> Sent: Wednesday, June 13, 2007 2:09 PM
> To: cas at tp.its.yale.edu
> Subject: Multiple Credential Requirements
>
> Is it possible to require multiple credentials in order to allow
> login?  One of the requests coming out of our security group is for
> multiple levels of authentication (such as requiring a x509
> certificate followed by a password as well).  Is that just a matter of
> adding additional authentication steps in the login-webflow.xml and
> chaining them together?  Or would involve an extension of CAS?
>
> If such functionality is not available, are there any plans to include
> it in the future?
>
> --
> Thanks,
> Dusty Burwell
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>



-- 
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070613/31b3320c/attachment.html