reloadable list in mfa flow?

[Cantor, Scott]

> How do I get access to the overrides bean at runtime?  And how in there do I
> include some random information?  I don't see where there's a place for a new
> list or property.  I'm wanting to set a flag:  'This RP needs some special
> processing'.

I probably need to know the use case. I was just referring to labeling systems into groups/sets with a label. Like "MFAAlways" or "MFAexceptApplicants", that kind of thing.

If you classify the systems involved with an override (in whatever way you want to do that), that's going to be alterable with a reload.

To access it (e.g. in an MFA rule):

var rpCtx = input.getSubcontext("net.shibboleth.idp.profile.context.RelyingPartyContext");
if (rpCtx != null && rpCtx.getConfiguration() != null && rpCtx.getConfiguration().getId().equals("osu.ForceMFASIS")) {
}

That's taken from my config.

Today I apply my overrides usually with simple lists of SPs, but Ill be moving to metadata tags shortly so I'll be enabling MFA types by adjusting or filtering their metadata and not touching my config.

It's generally possible to apply a condition bean to check for a metadata tag anywhere in the system, which is why essentially everything is possible to drive with metadata and that is, obviously, reloadable.

-- Scott