[java-identity-provider] branch master updated: Add AccountError/AccountLocked as legal authn events.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=c0125f274de4ba0e2afea954379566e06aa516d6

The following commit(s) were added to refs/heads/master by this push:
       new  c0125f2   Add AccountError/AccountLocked as legal authn events.
c0125f2 is described below

commit c0125f274de4ba0e2afea954379566e06aa516d6
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Aug 14 13:05:36 2018 -0400

    Add AccountError/AccountLocked as legal authn events.
---
 .../src/main/resources/system/flows/authn/authn-abstract-flow.xml     | 4 ++++
 idp-conf/src/main/resources/system/flows/authn/duo-authn-beans.xml    | 1 +
 2 files changed, 5 insertions(+)

diff --git a/idp-conf/src/main/resources/system/flows/authn/authn-abstract-flow.xml b/idp-conf/src/main/resources/system/flows/authn/authn-abstract-flow.xml
index 86dfe3b..afe3f0e 100644
--- a/idp-conf/src/main/resources/system/flows/authn/authn-abstract-flow.xml
+++ b/idp-conf/src/main/resources/system/flows/authn/authn-abstract-flow.xml
@@ -15,6 +15,8 @@
     <end-state id="proceed" />
 
     <!-- Error events to reflect back from this subflow. -->
+    <end-state id="AccountError" />
+    <end-state id="AccountLocked" />
     <end-state id="AuthenticationException" />
     <end-state id="IdentitySwitch" />
     <end-state id="InputOutputError" />
@@ -42,6 +44,8 @@
         <transition on="#{currentEvent.id.startsWith('authn/')}" to="ReselectFlow">
             <evaluate expression="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.authn.context.AuthenticationContext)).setSignaledFlowId(currentEvent.id)" />
         </transition>
+        <transition on="AccountError" to="AccountError" />
+        <transition on="AccountLocked" to="AccountLocked" />
         <transition on="AuthenticationException" to="AuthenticationException" />
         <transition on="IdentitySwitch" to="IdentitySwitch" />
         <transition on="InputOutputError" to="InputOutputError" />
diff --git a/idp-conf/src/main/resources/system/flows/authn/duo-authn-beans.xml b/idp-conf/src/main/resources/system/flows/authn/duo-authn-beans.xml
index 43ff19a..fe80f59 100644
--- a/idp-conf/src/main/resources/system/flows/authn/duo-authn-beans.xml
+++ b/idp-conf/src/main/resources/system/flows/authn/duo-authn-beans.xml
@@ -76,6 +76,7 @@
         <entry key="AccountLocked">
             <list>
                 <value>locked_out</value>
+                <value>Your two-factor account is disabled.</value>
             </list>
         </entry>
     </util:map>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.