Building a custom consent & password expiration plugin for Shib3

[dqluan]

Hello everyone,

This is my first time here. I am hoping to get some feedback on building a
custom consent workflow in Shib3, because I need to implement some very
specific organizational policies.

The problem is I am also completely new to Shib3, so I am unsure on the
best way to proceed.

I am planning to

1) Build a completely standalone Java project that produces a jar
2) Insert this jar into the bean flow in the property files of Shib3 so
that it always run when a user logs in
3) The standalone consent jar will check the user's agreement state, and
then break the user from the normal login flow and into a consent agreement
form page or back out to the login page as necessary.

This way the consent "plugin" will be as cleanly separated from the Shib3
code as possible.

What do you think?

Thanks and all the best,

Quang Luan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170517/3561e1c6/attachment.html>