Where to put multifactor flows

[Marvin Addison]

>
> That was at least one of the options I was considering so if you wanted to
> commit that, I'm ok with it. I don't think I filed an issue for this yet.
>

I did some further testing and it turns out this is not sufficient for our
use case. In short, the flow filtering mechanism that is enabled by the
patch is too strict when applied to the initial authn case. I can imagine
further knobs to make it work, but it feels like the wrong approach in
light of simply developing a custom flow. I think it's fair to say that our
use case is at present fairly uncommon and it's not worthwhile to
accommodate in a general way. I intend to document my work and the
obstacles in further detail on the shib-assurance wiki so that they're
captured for posterity. Maybe similar use cases will arise in the future
and we'll have enough data to develop a general solution.

Best,
M <dev-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150721/d2ae40f6/attachment.html>