Thoughts about authentication method / workflow mapping
Marvin Addison
marvin.addison at gmail.com
Thu Jul 18 14:47:31 EDT 2013
> Since the terms here get crazy (we probably should not have used Context ourselves), what do you mean by authentication context there?
Should have used class names. In reviewing your commits on this work,
I noted that AuthenticationContext has slots for various kinds of
workflows. Makes sense. But it was surprising that active workflows is
a collection:
@Nonnull @NonnullElements private ImmutableMap<String,
AuthenticationWorkflowDescriptor> activeWorkflows;
I'm thinking of AuthenticationContext as something that's relatively
short-lived; for example, exists just long enough to get the user
through the authentication process. If that's correct I can't imagine
how you can have more than one active flow. If the context is
longer-lived, e.g. for the life of the IdP session, then multiple
active flows makes more sense, but I'm still not certain I understand
how there would ever be more than one.
M
More information about the dev
mailing list