Scripting and Programming Guides › Developer's Guide for Java › Authentication and Authorization APIs › Create a Custom Authentication Scheme › User Disambiguation and Authentication › User Authentication

User Authentication

During this phase, SiteMinder calls authenticate() again to allow the authentication scheme to verify the supplied credentials after the user context has been established during disambiguation. The method sets one of the following status codes:

• SMAUTH_ACCEPT. The user is authenticated.
• SMAUTH_REJECT. The user is not authenticated.
• SMAUTH_CHALLENGE. The user is challenged. The scheme passes the challenge message to SiteMinder through the setUserText() method. Also, a reason code must be supplied in the SmAuthenticationResult object returned by authenticate().
• SMAUTH_FAILURE. An error condition occurred. Error text is passed to SiteMinder in setUserText().