[mitreid-connect] looking for help in authentication customization

Mark Janssen callisto at praseodym.net
Wed Mar 30 05:24:55 EDT 2016


Hi Amit,

MITREid Connect uses Spring Security for authentication purposes. You
should be able to develop an authentication provider for Spring Security
that implements the custom authentication scheme. This authentication
provider can then be configured in your MITREid Connect overlay. Aside from
this, you will need to implement a UserInfoRepository to provide user info
data to OIDC clients.

Regards,
Mark

On Wed, 30 Mar 2016 at 04:08 Amit Pal <apal at noknok.com> wrote:

> Hi Everyone,
>
> I am looking to replace the username/password based authentication with a
> custom authentication scheme (FIDO authentication : www.fidoalliance.org
> <http://ww.fidoalliance.org>).
> This custom authentication would be performed by another web app hosted in
> same container but it would NOT use username/password to authenticate user.
> It would display QRCode in the browser and user could use its mobile
> device(already registered) to perform the authentication. Auth response
> could be fetched by polling the other web app at predefined intervals.
> The MITREid server would need to parse the success/failure response and
> then continue its normal flow.
>
> Any help is appreciated.
>
> Thanks,
> Amit
>
>
>
> _______________________________________________
> mitreid-connect mailing list
> mitreid-connect at mit.edu
> http://mailman.mit.edu/mailman/listinfo/mitreid-connect
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/mitreid-connect/attachments/20160330/cc71353e/attachment.html


More information about the mitreid-connect mailing list