Hi
We are trying to implement a step up authentication(out of band SMS or email) apart from the regular HTML form based authentication for users accessing sites published using TMG. For achieving this we tried to create a web filter which registers for SF_NOTIFY_AUTH_COMPLETE event. Our plan was to redirect the user to a web application which handles the step up authentication when this event was trigerred(which we assumed would happen after the HTML form based authentication).
But we observe that the SF_NOTIFY_AUTH_COMPLETE event is called every time when the published site is accessed. How can we filter out other event triggers other than the event which occurs immediately after HTML form based authentication? Is there any other event type for which I can register to? Or can we check any data that is passed in the notification structures?
Thanks in advance!!
Santosh.