[ 
https://issues.apache.org/jira/browse/SYNCOPE-164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14045902#comment-14045902
 ] 

Francesco Chicchiriccò commented on SYNCOPE-164:
------------------------------------------------

The implementation is almost done on core (still integration tests and console 
missing, though).
As said above, I have extended {{AccountPolicy}} to feature a list of 
{{ExternalResource}} and changed the {{SyncopeAuthenticationProvider}} to 
consider the user authenticated if the authentication succeeds on the internal 
storage or one of external resources configured for the given {{AccountPolicy}}.
That's fine.

I have some doubts about the process for selecting the {{AccountPolicy}} to be 
considered for the user being authenticated: ATM such selection process works 
as follows:
 # look for directly assigned resources and pick one whose account policy has 
authentication resources configured
 # if not found, look for owned roles and pick one whose account policy has 
authentication resources configured
 # if not found, take global policy

WDYT?

> Passthrough authentication
> --------------------------
>
>                 Key: SYNCOPE-164
>                 URL: https://issues.apache.org/jira/browse/SYNCOPE-164
>             Project: Syncope
>          Issue Type: New Feature
>            Reporter: Francesco Chicchiriccò
>            Assignee: Francesco Chicchiriccò
>             Fix For: 1.2.0
>
>
> Provide the possibility to authenticate users on external resources.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to