This content has been marked as final. Show 1 reply
I would just add a generic:
public Principal authenticate(Header headers, Map data);
method to the Realm interface for a generic callout. The AuthenticatorBase does not handle authentication other than sso reauthentication. Whatever specific Realm authentication method that the authenticator wants to use is up to the authenticator.
There is still the question of the SingleSignOn of the AuthenticatorBase.