The company where i am currently working has a special kind of authentication process.
Indeed, several users can have the same login and password. So, to identify them, in a second time, the user has to give his email. But again, in a few cases, several users can be concerned and then, the user has to give his company id to be full authenticated.
So, my problem is that in some cases, the authentication process cannot be done in one step, which is the default behaviour of most applications that Spring Security handles out of the box.
So my question is : what is the simpliest way to implement with Spring Security this special login process ?
Thanks in advance.