Hi Kumar,We ultimately abandoned this requirement but we did manage to get something working.We created a custom authentication handler by extending SamlAuthenticationHandler. In extractCredentials() we explicitly check the request path and the user's group membership and return FAIL_AUTH if we need to force authentication.import com.adobe.granite.auth.saml.SamlAuthenticationHandler;...public class CustomSamlAuthenticationHandler extends SamlAuthenticationHandler { @Override public Authenticatio...

Hmmmm...Maybe I'm mistaken. This doesn't seem to work without a custom transformer.

Hi Jitendra,Thanks for the suggestion.I tried adding a few different mappings for /content/dam but it doesn't seem to make a difference.For now I'm mapping /content/dam to itself so that it's effectively excluded from the mapping. So direct requests to images under /content/dam work correctly.However, regardless of how I map /content/dam, image components continue to render with /content/app1 in the path.Thanks,David

Is Dispatcher definitely loading the correct dispatcher.any file?

So sorry, I don't have a working configuration file.Are you sure that Dispatcher is loading the correct configuration file? If you intentionally break the configuration do you see errors in the Dispatcher log?For example, if you change "/auth_checker" to "/auth_checker_broken" or just "auth_checker_broken" (with no preceding slash), does Dispatcher complain?

Thanks, Opkar.Unfortunately the same user can have access to both areas. That's really the main complication here.A user can have access (via group membership) to both paths. But they still need to authenticate a second time when accessing a SAML2 path.

Ok sorry. I configured permission sensitive caching a while ago and I recall that I had to futz with the configuration to get it right. But I don't remember what exactly was the problem.If you put some garbage in there or misspell auth_checker does Dispatcher complain after startup about the broken configuration? Is Dispatcher definitely reading that section of the configuration?