How to configure Inbound message processing interception with principal criteria

[Berhaut Marc]

Hello,

I'd like to configure an intercept onto my IDP so that a user matching 
some specific criteria would be automatically redirected towards a 
static HTML page.

I succeeded to acheive that behaviour while configuring an intercept of 
type "Post-authentication" like this :

*//conf/relying-party.xml__/*

     <bean id="CAS.LoginConfiguration_custom" 
class="net.shibboleth.idp.cas.config.impl.LoginConfiguration"
             p:servletRequest-ref="shibboleth.HttpServletRequest"
             p:ticketValidityPeriod="60000"
             p:p:postAuthenticationFlows="regulation" />

*//conf/intercept/regulation-intercept-config.xml/*

     <bean id="shibboleth.regulation.Condition" 
parent="shibboleth.Conditions.AND">
         <constructor-arg>
             <list>
                 <bean 
class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate" 
p:useUnfilteredAttributes="true">
                     <property name="attributeValueMap">
                          <map>
                              <entry key="id">
                                  <list>
<value>john.doe</value>
                                  </list>
                              </entry>
                          </map>
                      </property>
                 </bean>
             </list>
         </constructor-arg>
     </bean>

_But my intention is to make interception based on the Inbound message 
processing _(/p:inboundInterceptorFlows/) so that no SSO session is 
created since it is useless. The user would be immediately (after 
authentication) to the static HTML page.

Is this possible ? How do I configure the condition bean (from the file 
*/regulation-intercept-config.xml/*) in order to extract the principal 
name of the just authenticated user (to notice : the authn/RemoteUser 
login flow is configured) ?

Thanks for helping me,

BR,


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20231201/9b7b7e9a/attachment.htm>