who.ini

[plugin:redirector]
use = repoze.who.plugins.redirector:make_plugin
login_url = /login.html

[plugin:auth_tkt]
use = repoze.who.plugins.auth_tkt:make_plugin
secret = secret
cookie_name = auth_tkt
secure = False
include_ip = False

[plugin:sa]
use = repoze.who.plugins.sa:make_sa_authenticator
user_class = shirly.models:User
dbsession = shirly.models:DBSession

[plugin:sa_mdp]
use = repoze.who.plugins.sa:make_sa_user_mdprovider
user_class = shirly.models:User
dbsession = shirly.models:DBSession

[general]
request_classifier = repoze.who.classifiers:default_request_classifier
challenge_decider = repoze.who.classifiers:default_challenge_decider
remote_user_key = REMOTE_USER

[identifiers]
plugins = auth_tkt

[authenticators]
plugins = 
    sa
    auth_tkt

[challengers]
plugins =
    redirector

[mdproviders]
plugins = 
    sa_mdp