...
- authenticationDuration - length of time in minutes that the authentication method associated with this login handler is active; default: 30 minutes
- authenticationServletURL - path to the servlet responsible for collecting using credentials and authenticating the user; default: /<CONTEXT_PATH>/Authn/UserPassword
Additionally the login handler must contain one or more <AuthenticationMethod> elements whose content is the authentication method(s) serviced by the login handler.
...