[java-identity-provider] branch main updated: Deprecate extended flow feature and remove config.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=b134c41e322f750fde765356a6a41c8a8b4d90dc

The following commit(s) were added to refs/heads/main by this push:
     new b134c41e3 Deprecate extended flow feature and remove config.
b134c41e3 is described below

commit b134c41e322f750fde765356a6a41c8a8b4d90dc
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Feb 28 09:02:32 2022 -0500

    Deprecate extended flow feature and remove config.
---
 .../idp/flows/authn/password-authn-flow.xml        |  3 ++
 .../module/conf/authn/password-authn-config.xml    | 32 ----------------------
 2 files changed, 3 insertions(+), 32 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-flow.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-flow.xml
index c7aea0532..3636037be 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-flow.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/password-authn-flow.xml
@@ -56,6 +56,9 @@
     </view-state>
     
     <action-state id="PreserveAuthenticationFlowState">
+        <on-entry>
+            <evaluate expression="T(net.shibboleth.utilities.java.support.primitive.DeprecationSupport).warnOnce(T(net.shibboleth.utilities.java.support.primitive.DeprecationSupport.ObjectType).CONFIGURATION, 'Extended Flow', null, 'MFA login flow')" />
+        </on-entry>
         <evaluate expression="PreserveAuthenticationFlowState" />
         <evaluate expression="'proceed'" />
         
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
index 4529b6f7c..2c648ec0d 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/authn/password-authn-config.xml
@@ -109,36 +109,4 @@
         </entry>
     </util:map>
 
-    <!--
-    WARNING: This set of features is generally discouraged in favor of the MFA flow,
-    and while not deprecated, is not recommended for new deployments.
-    
-    Configuration of "extended" login methods to offer in the password login form.
-    
-    The String bean is a regular expression identifying the flows to offer. These flows
-    must also be enabled at the "top" level to be available for use.
-    
-    The ExtendedFlowParameters bean can be used to transfer custom parameters from the
-    login form into the context tree for use later by other flows.
-    
-    The last bean provides the set of custom Principals to use for results produced by the
-    Password flow itself. You would use this if you need the Password flow to run as a shell
-    to run the "extended" login methods, but want to limit its own results more narrowly.
-    -->
-    <!--
-    <bean id="shibboleth.authn.Password.ExtendedFlows" class="java.lang.String" c:_0="" />
-
-    <util:list id="shibboleth.authn.Password.ExtendedFlowParameters">
-    </util:list>
-
-    <util:list id="shibboleth.authn.Password.PrincipalOverride">
-        <bean parent="shibboleth.SAML2AuthnContextClassRef"
-            c:classRef="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport" />
-        <bean parent="shibboleth.SAML2AuthnContextClassRef"
-            c:classRef="urn:oasis:names:tc:SAML:2.0:ac:classes:Password" />
-        <bean parent="shibboleth.SAML1AuthenticationMethod"
-            c:method="urn:oasis:names:tc:SAML:1.0:am:password" />
-    </util:list>
-    -->
-    
 </beans>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.