From 8b89e804e30f6ace5a35979a90641d50bd5f1b7b Mon Sep 17 00:00:00 2001
From: Rob Winch <rwinch@gopivotal.com>
Date: Fri, 23 Sep 2016 13:08:08 -0500
Subject: [PATCH] Polish RequestAttributeAuthenticationFilter

Issue gh-3978
---
 .../preauth/RequestAttributeAuthenticationFilter.java         | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/web/src/main/java/org/springframework/security/web/authentication/preauth/RequestAttributeAuthenticationFilter.java b/web/src/main/java/org/springframework/security/web/authentication/preauth/RequestAttributeAuthenticationFilter.java
index 964b1ef944..aaa54018b6 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/preauth/RequestAttributeAuthenticationFilter.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/preauth/RequestAttributeAuthenticationFilter.java
@@ -21,7 +21,9 @@ import org.springframework.util.Assert;
 
 /**
  * A simple pre-authenticated filter which obtains the username from request attributes,
- * for use with SSO systems such as Stanford WebAuth or Shibboleth.
+ * for use with SSO systems such as
+ * <a href="http://webauth.stanford.edu/manual/mod/mod_webauth.html#java">Stanford WebAuth</a> or
+ * <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPJavaInstall">Shibboleth</a>.
  * <p>
  * As with most pre-authenticated scenarios, it is essential that the external
  * authentication system is set up correctly as this filter does no authentication