authentication process, subflows, and SubjectContext creation

[Scott Koranda]

Hi,

I am looking in detail at this page in the wiki:

https://wiki.shibboleth.net/confluence/display/IDP30/Authentication

Specifically the section "Authentication Process".

Suppose the user is starting from no session or state and begins a SAML2
SSO flow (CAS is not in scope here). The selected authentication flow
is a custom flow that calls the Password flow as a subflow, eg.

<subflow-state id="CallPasswordFlow" subflow="authn/Password">
        <input name="calledAsSubflow" value="true"/>
        <transition on="proceed" to="MyNextState"/>
</subflow-state>

Once the Password flow completes (as a subflow), is a SubjectContext
created and available as outlined in step 6? Or is that only after
the flow that called Password completes?

Put another way, is this statement on the wiki page

"Success will populate a SubjectContext as a child of the
ProfileRequestContext"

true when the flow is only invoked as a subflow?

Thanks,

Scott K