Shibboleth custom password flow
<p>I need to set up Shibboleth IdP to validate user name and password against a custom application. </p>

<p>Our application exposes a REST API to which one can pass a user's credentials and either returns a 401 on failure or a JSON object with some user metadata on success.</p>

<p>I was able to achieve this in SimpleSamlPHP IdP with a 30-line class, but having to switch to Shibboleth, I am having a hard time finding directions to do the same there. </p>

<p>Reading through the documentation the suggested solution seems to be to create a custom back end for the password login flow but the <a href="https://wiki.shibboleth.net/confluence/display/IDP30/PasswordAuthnConfiguration" rel="nofollow">Wiki</a> does not explain in detail how to do this.</p>

<p>Can somebody point me out to some tutorials or sample code on which files need to be created or changed in order to do this (even basic examples of checking against a credential file or database would be fine)?</p>