Page Comparison

...

• authenticationDuration - length of time in minutes that the authentication method associated with this login handler is active; default: 30 minutes
• protectedServletPath - context-relative path to the Servlet protected by REMOTE authentication; default is /<CONTEXT_PATH>/Authn/RemoteUser

Additionally the login handler must contain one or more <AuthenticationMethod> elements whose content is the authentication method(s) serviced by the login handler.

...

Apache httpd w/ Basic Authentication + Apache Tomcat

1. Create a user/password file using the htpasswd command:

   No Format
   htpasswd -s /PATH/TO/FILE USERNAME

2. Add the following location directive to your Apache httpd configuration

   Code Block
   title Example Apache httpd Location Directive
   <Location /<CONTEXT_PATH>/Authn/RemoteUser> AuthType Basic AuthName "Identity Provider Authentication" AuthUserFile /PATH/TO/USER/FILE require valid-user </Location>

3. Add the following attribute to your AJP connector in the Tomcat server.xml file: tomcatAuthentication="false"

   Code Block
   xml xml title Example Tomcat AJP Connector
   <Connector address="127.0.0.1" port="8009" protocol="AJP/1.3" enableLookups="false" tomcatAuthentication="false" />