Custom Authentication Handler and Custom login module

[Geetika]

Hello Experts,

I am trying to understand the behaviour of Authentication Handler and Login module and when do we need to write a custom one. I think I understood the need to write a custom Authentication Handler i.e. when we need to extract the login credentials in a way which is not provided OOTB, a custom authentication handler is needed. For example, SAML 2 authentication handler, SSO handler is a custom implementation. But I am failed to understand when do we need to write a custom login module and how both, an Authentication handler and a login module are related and how they communicate with each other?

Can experts provide some insights on this?

Regards,

Geetika

[smacdonald2008]

There are a few pieces of content that we have you should watch. First - watch this GEMS session on SAML:

Utilizing SAML in AEM deployments

Watch this ATCE session that is related: ATACE Feb 15 Login sites

Here is related SLing docs -- Apache Sling :: Authentication