[java-idp-plugin-duo] branch main updated: JDUO-10 - Installing available Duo authentication flow

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-duo.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commit;h=7b48693775b40eade17a77bedd07a0abee348b8c

The following commit(s) were added to refs/heads/main by this push:
       new  7b48693   JDUO-10 - Installing available Duo authentication flow
7b48693 is described below

commit 7b48693775b40eade17a77bedd07a0abee348b8c
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Wed Aug 19 16:14:32 2020 +0100

    JDUO-10 - Installing available Duo authentication flow
    
     - Moved the authentication flow descriptor to the postconfig.xml
    
    https://issues.shibboleth.net/jira/browse/JDUO-10
---
 .../resources/META-INF/net.shibboleth.idp/postconfig.xml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/idp-duo-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/idp-duo-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index 36dd998..8cc6002 100644
--- a/idp-duo-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/idp-duo-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -11,10 +11,24 @@
 
     <!-- System beans needed for extension to function, loaded after global.xml -->
 
+    <!-- Authentication Flow Descriptor -->
+
+    <bean p:id="authn/DuoOIDC" parent="shibboleth.AuthenticationFlow" p:forcedAuthenticationSupported="true"
+        p:passiveAuthenticationSupported="false" p:nonBrowserSupported="false"> <!-- no nonbrowser, passive? -->
+        <!-- The list below should be changed to reflect whatever locally- or community-defined values are appropriate to 
+            represent MFA. It is strongly advised that the value not be specific to Duo or any particular technology. -->
+        <property name="supportedPrincipals">
+            <list>
+                <bean parent="shibboleth.SAML2AuthnContextClassRef" c:classRef="http://example.org/ac/classes/mfa" />
+                <bean parent="shibboleth.SAML1AuthenticationMethod" c:method="http://example.org/ac/classes/mfa" />
+            </list>
+        </property>
+    </bean>
+
     <!-- Controller implementation -->
     <bean id="shibboleth.DuoOIDCAuthnController"
         class="net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController" />
 
 
-  
+
 </beans>
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.