<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-98efb278-00ca-4bdb-b9a2-0c050d9c9583" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="adamhl@stanford.edu" id="email_adamhl@stanford.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=adamhl%40stanford.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">Adam Henry Lewenberg</a> <strong>created</strong> an issue </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/IDP" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://issues.shibboleth.net/jira/browse/IDP-1260" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-3ffec594-b54e-4bd0-8383-b890c2cc5dce" height="16" width="16" border="0" align="absmiddle" alt="Task" style="vertical-align: text-bottom"></a> <a href="https://issues.shibboleth.net/jira/browse/IDP-1260" style="color: #3b73af; text-decoration: none">IDP-1260</a> </td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1260" style="color: #3b73af; text-decoration: none">How to stack informational web flows</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 10px; padding-bottom: 5px" bgcolor="#ffffff">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Issue Type:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-avatar-3ffec594-b54e-4bd0-8383-b890c2cc5dce" height="16" width="16" border="0" align="absmiddle" alt="Task" style="vertical-align: text-bottom"> Task </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Affects Versions:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 3.3.1 </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Assignee:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="tzeller@shibboleth.net" id="email_tzeller@shibboleth.net" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=tzeller%40shibboleth.net" style="color:#3b73af;; color: #3b73af; text-decoration: none">Tom Zeller</a> </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Components:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> Spring Web Flow </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Created:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> 07/Mar/18 5:14 PM </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Priority:</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-critical-444bd9b5-ee89-4dca-b363-6c45082df859" height="16" width="16" border="0" align="absmiddle" alt="Critical" style="vertical-align: text-bottom"> Critical </td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">Reporter:</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="adamhl@stanford.edu" id="email_adamhl@stanford.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=adamhl%40stanford.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">Adam Henry Lewenberg</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; padding-top: 5px; padding-bottom: 10px" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0; margin-top: 0">We are using the expiring password intercept flow ('expiring-password') that comes with the IdP software. I have added another, similar flow ('som-datasecurity'), that is presented to the user if the user has to complete some extra security tasks. </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">I want this second page to act identically to the expiring page intercept: show a page for several seconds before the user is redirected to their originally intended SP. </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">While both the 'expiring-password' and 'som-datasecurity' intercept flows work in isolation, if the user is subject to BOTH intercepts, we are seeing ONLY 'expiring-password' instead of 'expiring-password' followed by 'som-datasecurity'. That is, the 'expiring-password' view appears, hangs around for 30 seconds, then the browser is redirected to the user's desired SP rather than showing the 'som-datasecurity' view. </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">To create the 'som-datasecurity' flow, I copied and adjusted these files:</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">flows/authn/conditions/expiring-password/expiring-password-flow.xml<br> system/flows/intercept/expiring-password-beans.xml<br> system/flows/intercept/expiring-password-flow.xml</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">so that I also have </p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">flows/authn/conditions/som-datasecurity/som-datasecurity-flow.xml<br> flows/intercept/som-datasecurity/som-datasecurity-beans.xml<br> flows/intercept/som-datasecurity/som-datasecurity-flow.xml</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">The relevant configuration in relying-party.xml is</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">p:postAuthenticationFlows="#<tt>'expiring-password', 'som-datasecurity', 'terms-of-use'</tt>"</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">In case it might be helpful, I have included some log output at the bottom.</p> <p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">2018-03-07 13:49:09,925 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.SelectProfileInterceptorFlow:84]</span> - Profile Action Selec<br> tProfileInterceptorFlow: Selecting flow intercept/expiring-password<br> 2018-03-07 13:49:30,094 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.WriteProfileInterceptorResultToStorage:68]</span> - Profile Ac<br> tion WriteProfileInterceptorResultToStorage: No results available from interceptor context, nothing to store<br> 2018-03-07 13:49:30,095 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:52]</span> - Profile Action Fil<br> terFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do<br> 2018-03-07 13:49:30,095 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.SelectProfileInterceptorFlow:65]</span> - Profile Action Selec<br> tProfileInterceptorFlow: Moving completed flow intercept/expiring-password to completed set, selecting next one<br> 2018-03-07 13:49:30,095 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.SelectProfileInterceptorFlow:101]</span> - Profile Action Sele<br> ctProfileInterceptorFlow: Checking flow intercept/som-datasecurity for applicability...<br> 2018-03-07 13:49:30,096 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.SelectProfileInterceptorFlow:84]</span> - Profile Action Selec<br> tProfileInterceptorFlow: Selecting flow intercept/som-datasecurity<br> 2018-03-07 13:49:30,100 - DEBUG <span class="error">[net.shibboleth.idp.profile.logic.SimpleAttributePredicate:87]</span> - Checking for attribute: eduPersonEntitlement<br> 2018-03-07 13:49:30,100 - DEBUG <span class="error">[net.shibboleth.idp.profile.logic.SimpleAttributePredicate:129]</span> - Found matching value (idp-rest:som<br> -amie-non-compliance-warning-dev) in attribute eduPersonEntitlement<br> 2018-03-07 13:49:30,101 - DEBUG <span class="error">[net.shibboleth.idp.profile.logic.AbstractAttributePredicate:97]</span> - Context satisfied requirements<br> 2018-03-07 13:49:30,102 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.WriteProfileInterceptorResultToStorage:68]</span> - Profile Ac<br> tion WriteProfileInterceptorResultToStorage: No results available from interceptor context, nothing to store<br> 2018-03-07 13:49:30,102 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.FilterFlowsByNonBrowserSupport:52]</span> - Profile Action Fil<br> terFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do<br> 2018-03-07 13:49:30,102 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.SelectProfileInterceptorFlow:65]</span> - Profile Action Selec<br> tProfileInterceptorFlow: Moving completed flow intercept/som-datasecurity to completed set, selecting next one<br> 2018-03-07 13:49:30,103 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.SelectProfileInterceptorFlow:101]</span> - Profile Action SelectProfileInterceptorFlow: Checking flow intercept/terms-of-use for applicability...<br> 2018-03-07 13:49:30,103 - DEBUG <span class="error">[net.shibboleth.idp.profile.interceptor.impl.SelectProfileInterceptorFlow:84]</span> - Profile Action SelectProfileInterceptorFlow: Selecting flow intercept/terms-of-use</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1260#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-d613e2a1-ef87-41f9-823e-1b2b3472ab6c" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1260#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.4.2#74004-<span title="586975da6d5c632f4f0de24a42c40182e6b9ead0" data-commit-id="586975da6d5c632f4f0de24a42c40182e6b9ead0}">sha1:586975d</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-af8fcce5-0f98-4437-970a-dd69424973fe" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>