[java-idp-plugin-totp] branch main updated: Property-enable flow descriptor.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-idp-plugin-totp.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-totp.git;a=commit;h=c4e16e31cf47c1c063cf4f709f5dbcc94a7c69c0

The following commit(s) were added to refs/heads/main by this push:
       new  c4e16e3   Property-enable flow descriptor.
c4e16e3 is described below

commit c4e16e31cf47c1c063cf4f709f5dbcc94a7c69c0
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Aug 25 15:29:31 2020 -0400

    Property-enable flow descriptor.
---
 .../META-INF/net.shibboleth.idp/postconfig.xml      | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

diff --git a/totp-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/totp-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index afb27df..2eec340 100644
--- a/totp-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/totp-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -10,10 +10,19 @@
     default-init-method="initialize" default-destroy-method="destroy">
 
     <!-- System beans needed for extension to function, loaded after global.xml -->
-
-    <bean p:id="authn/TOTP" parent="shibboleth.AuthenticationFlow"
-            p:passiveAuthenticationSupported="true"
-            p:forcedAuthenticationSupported="true">
+  
+    <bean id="authn/TOTP" parent="shibboleth.AuthenticationFlow"
+            p:order="%{idp.authn.TOTP.order:1000}"
+            p:nonBrowserSupported="%{idp.authn.TOTP.nonBrowserSupported:true}"
+            p:passiveAuthenticationSupported="%{idp.authn.TOTP.passiveAuthenticationSupported:true}"
+            p:forcedAuthenticationSupported="%{idp.authn.TOTP.forcedAuthenticationSupported:true}"
+            p:proxyRestrictionsEnforced="%{idp.authn.TOTP.proxyRestrictionsEnforced:%{idp.authn.enforceProxyRestrictions:true}}"
+            p:proxyScopingEnforced="%{idp.authn.TOTP.proxyScopingEnforced:false}"
+            p:discoveryRequired="%{idp.authn.TOTP.discoveryRequired:false}"
+            p:lifetime="%{idp.authn.TOTP.lifetime:%{idp.authn.defaultLifetime:PT1H}}"
+            p:inactivityTimeout="%{idp.authn.TOTP.inactivityTimeout:%{idp.authn.defaultTimeout:PT30M}}"
+            p:reuseCondition-ref="#{'%{idp.authn.TOTP.reuseCondition:shibboleth.Conditions.TRUE}'.trim()}"
+            p:activationCondition-ref="#{'%{idp.authn.TOTP.activationCondition:shibboleth.Conditions.TRUE}'.trim()}">
         <property name="supportedPrincipals">
             <list>
                 <bean parent="shibboleth.SAML2AuthnContextClassRef"
@@ -22,6 +31,10 @@
                     c:method="urn:oasis:names:tc:SAML:1.0:am:HardwareToken" />
             </list>
         </property>
+        <property name="supportedPrincipalsByString">
+            <bean parent="shibboleth.CommaDelimStringArray"
+                c:_0="#{'%{idp.authn.TOTP.supportedPrincipals:}'.trim()}" />
+        </property>
     </bean>
   
 </beans>
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.