Embedded flows in MFA flows? Some other way to poll?

[Greg Haverkamp]

I'm not sure I'm even asking this correctly, so I apologize if I'm
butchering the question.  And I'll note that I think I have a solution to
this problem that doesn't require a pure Shibboleth solution; a pure
Shibboleth solution just seems better, if it's doable.

I'm trying to add to my LinOTP MFA module the ability to use LinOTP's
asynchronous push authentication.  Essentially, user authenticates via
UsernamePassword, then we go to the server via a backchannel call, generate
a challenge, and store it in the LinOTP context.

Ideally, I'd then like to be able to able to poll for authentication
status.  I can do that by repeatedly submitting a form and checking the
current status and responding properly in the flow, but I'd ideally like to
be able to do it without the POST-REDIRECT-GET process.  However, I'm
feeling pretty dense, and I can't tell if, operating as a subflow within
the MFA flow, I can even do things like initiate my embedded flow as
embedded so I can use the spring-js stuff.  Or, perhaps there's another way
to do it I'm not aware of.  (Or, if I can't even understand this level,
there's always the question of whether I should tackle it at all.)

(If it's not possible or is a lot of work, my plan is just to externalize
the check by calling the LinOTP server's status-check endpoint directly or
via an intermediary web service.  It just feels a little hokey to do so.)

Thanks.

Greg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20171027/be5ab409/attachment.html>