CallExtendedFlow for Custom Password Help Flow

[Marvin Addison]

On Wed, Aug 10, 2016 at 9:51 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> That was really a primitive attempt to start modeling the stuff I ended up
> doing from scratch for MFA. I suspect you might be better off having the
> Password flow signal back an event, and using the MFA logic to branch off
> from that.
>

I guess I could make that work with some re-entrant MFA transitions, but it
really feels more natural to branch off the password flow.

Good news is that I got it working exactly like I wanted with password
extended flows. Here's a diff of the config changes I made to get it
working:

https://gist.github.com/serac/4429c75af127b442c919b2ad99d53f9c

It's worth noting that I had to have my subflow terminate with a
DisplayUsernamePasswordPage end state to return control to the login form
when the subflow completed.

The root cause of the NPE that I reported initially is that I had
forcedAuthenticationSupported="false" on my extended flow definition bean,
which caused it to be filtered out when my test request came in with that
flag set on the PRC.

Best,
M <dev-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20160810/56dd9b23/attachment.html>