[java-idp-plugin-webauthn] branch main updated: Add flow descriptor properties

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=c22c99839b5b6d5b5e1da7664f9db62cdfccea40

The following commit(s) were added to refs/heads/main by this push:
     new c22c998  Add flow descriptor properties
c22c998 is described below

commit c22c99839b5b6d5b5e1da7664f9db62cdfccea40
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Wed Feb 14 13:43:06 2024 +0000

    Add flow descriptor properties
---
 .../plugin/authn/webauthn/conf/authn/webauthn.properties    | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index 698d92c..aad2323 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -10,6 +10,19 @@ idp.authn.webauthn.relyingPartyName = Shibboleth
 # Allow any subdomain of that origin
 #idp.authn.webauthn.allowOriginSubdomain = false
 
+# Generic flow properties to adjust behavior
+#idp.authn.webauthn.order = 1000
+#idp.authn.webauthn.nonBrowserSupported = false
+#idp.authn.webauthn.forcedAuthenticationSupported = true
+# The list below should be changed to reflect whatever locally- or
+# community-defined values are appropriate to represent WebAuthn. It is
+# strongly advised that the value not be specific to WebAuthn or any
+# particular technology to avoid lock-in.
+idp.authn.webauthn.supportedPrincipals = \
+    saml2/http://example.org/ac/classes/mfa, \
+    saml1/http://example.org/ac/classes/mfa
+
+
 # An override of origins this RP allows in a responses from an authenticator
 #idp.authn.webauthn.origins = https://localhost
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.