Can I Use multiple HTTPHeaders for authentication?

Question

Hello,
I got a question about login into portal with HTTP Headers.
My system has two different reverse proxys with their respective agents of authentication, and each one of them gives me a HTTP Header with a different name, but the content will be always the same: the user name.
Can I configure a Login Module Stack with two HeaderVariableLoginModules? I guess it's possible, but I'm not really sure. If it's possible, will be something like the next?
EvaluateTicketLoginModule     SUFFICIENT    {ume.configuration.active=true}
HeaderVariableLoginModule     OPTIONAL      {ume.configuration.active=true, Header=HEADER1}
CreateTicketLoginModule        SUFFICIENT     {ume.configuration.active=true}
HeaderVariableLoginModule     OPTIONAL      {ume.configuration.active=true, Header=HEADER2}
CreateTicketLoginModule        SUFFICIENT     {ume.configuration.active=true}
BasicPasswordLoginModule    REQUISITE {}
CreateTicketLoginModule        OPTIONAL     {ume.configuration.active=true}
Thank you in advance

Answer 1

Hi Marc,
What you have is exactly right - we are using a very similar stack.
In essence, you can chain any number of authentication modules using the form:
EvaluateTicket - SUFFICIENT
Module1 - OPTIONAL
CreateTicket - SUFFICIENT
Module2 - OPTIONAL
CreateTicket - SUFFICIENT
ModuleN - OPTIONAL
CreateTicket - SUFFICIENT
BasicPassword - REQUISITE
CreateTicket - OPTIONAL
The principle is that CreateTicket will only be successful if there is a valid user in the context (from the previous Module), so the logic progresses down the stack until a Module correctly gets a user, and then exits with a successful Sufficient CreateTicket.
The last two lines provide a fallback position which is to allow a username/password login if all else fails.
Hope this helps,
Darren