[java-identity-provider COMMIT] /branches/3.3/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml

[noreply at shibboleth.net]

Author: scantor
Date: Tue Mar  7 20:54:20 2017
New Revision: 8664

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8664&view=rev
Log:
BPr8602 - Correct the example script to get the username appropriately.

Modified:
    branches/3.3/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml

Modified: branches/3.3/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/branches/3.3/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml?rev=8664&r1=8663&r2=8664&view=diff
==============================================================================
--- branches/3.3/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml	(original)
+++ branches/3.3/idp-conf/src/main/resources/conf/authn/mfa-authn-config.xml	Tue Mar  7 20:54:20 2017
@@ -70,8 +70,13 @@
                     // Attribute check is required to decide if first factor alone is enough.
                     resCtx = input.getSubcontext(
                         "net.shibboleth.idp.attribute.resolver.context.AttributeResolutionContext", true);
-                    resCtx.setPrincipal(input.getSubcontext(
-                        "net.shibboleth.idp.authn.context.SubjectCanonicalizationContext").getPrincipalName());
+
+                    // Look up the username using a standard function.
+                    usernameLookupStrategyClass
+                        = Java.type("net.shibboleth.idp.session.context.navigate.CanonicalUsernameLookupStrategy");
+                    usernameLookupStrategy = new usernameLookupStrategyClass();
+                    resCtx.setPrincipal(usernameLookupStrategy.apply(input));
+                        
                     resCtx.getRequestedIdPAttributeNames().add("allowedLoginMethods");
                     resCtx.resolveAttributes(custom);