CMAFS: Make Shibboleth IdP Support Multiple External Authentication Mechanisms

CARSI realize resource sharing by using Shibboleth IdP (Identity Provider) and SP (Service Provider), which are based on SAML protocol. Universities in China join CARSI as IdP or SP member, service providers join CARSI as SP member. Shibboleth IdP external login flow supports only one arbitrary external authentication mechanism. For universities have multiple authentication systems, if we use only one authentication systems will make some users unable to use CARSI. So, we designed an authentication system named CARSI Multiple Authentication Flow System (CMAFS) to solve this problem. CMAFS will make Shibboleth IdP support multiple authentication mechanisms. We deployed and tested CMAFS in Peking University.