[java-identity-provider] branch main updated: Add property fall back for validateLoginTransitions setting.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=c0d5e0650f1e55f86fce82eda5f798d8617ee40e

The following commit(s) were added to refs/heads/main by this push:
       new  c0d5e0650 Add property fall back for validateLoginTransitions setting.
c0d5e0650 is described below

commit c0d5e0650f1e55f86fce82eda5f798d8617ee40e
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Oct 19 15:51:48 2020 -0400

    Add property fall back for validateLoginTransitions setting.
---
 .../main/resources/net/shibboleth/idp/flows/authn/mfa-authn-beans.xml   | 2 +-
 idp-conf/src/main/resources/conf/authn/authn.properties                 | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/mfa-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/mfa-authn-beans.xml
index f1d893da7..687d42e9d 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/mfa-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/mfa-authn-beans.xml
@@ -32,7 +32,7 @@
         
     <bean id="TransitionMultiFactorAuthentication" scope="prototype"
         class="net.shibboleth.idp.authn.impl.TransitionMultiFactorAuthentication"
-        p:validateLoginTransitions="#{getObject('shibboleth.authn.MFA.validateLoginTransitions') ?: true}" />
+        p:validateLoginTransitions="#{getObject('shibboleth.authn.MFA.validateLoginTransitions') ?: %{idp.authn.MFA.validateLoginTransitions:true}}" />
 
     <bean id="FinalizeMultiFactorAuthentication" scope="prototype"
         class="net.shibboleth.idp.authn.impl.FinalizeMultiFactorAuthentication"
diff --git a/idp-conf/src/main/resources/conf/authn/authn.properties b/idp-conf/src/main/resources/conf/authn/authn.properties
index 8b1801c42..33b76157c 100644
--- a/idp-conf/src/main/resources/conf/authn/authn.properties
+++ b/idp-conf/src/main/resources/conf/authn/authn.properties
@@ -199,6 +199,7 @@ idp.authn.Duo.supportedPrincipals = \
 #idp.authn.MFA.order = 1000
 #idp.authn.MFA.passiveAuthenticationSupported = true
 #idp.authn.MFA.forcedAuthenticationSupported = true
+#idp.authn.MFA.validateLoginTransitions = true
 # The list below almost certainly requires changes, and should generally be the
 # union of any of the separate factors you combine in your particular MFA flow
 # rules. The example corresponds to the example in mfa-authn-config.xml that

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.