<html><head><style>body{font-family:Bookerly,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="margin: 0px;"><div id="bloop_customfont" style="margin: 0px;"><font size="3">I am troubleshooting a bizzar case where IdP 3.3-SNAPSHOT freshly built as of 5 minutes ago is not switching a custom authentication flow that is indicated by "idp.authn.resolveAttribute</font>”<font size="3">. </font></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><span style="font-size: 13px;"><br></span></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><span style="font-size: 13px;">Here is the setup:</span></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">idp.authn.flows = Password|TB</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">idp.authn.flows.initial = Password</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">idp.authn.resolveAttribute = requiredAuthnCtx</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">On a brand new request, I can see the IdP attempts to resolve “requiredAuthnCtx" <span style="font-size: 13px;">and filter flows. Logs show:</span></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">> Retaining flow authn/TB, matched custom Principal https://www.example.edu/q</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">> Profile Action SelectAuthenticationFlow: No specific Principals requested (Misagh: this is odd, surely.) </div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">> Profile Action SelectAuthenticationFlow: Reusing active result authn/Password</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">...and the custom TB flow is never activated. </div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">However, I simply log out of the SP and attempt to authenticate again, this time <span style="font-size: 13px;">the IdP activates the TB flow having retained it just like last time:</span></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">> Profile Action SelectAuthenticationFlow: No specific Principals requested</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">> Profile Action SelectAuthenticationFlow: No usable active results available, selecting an inactive flow</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">> Profile Action SelectAuthenticationFlow: Selecting inactive authentication flow authn/TB</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">Needless to say, the changes I have worked great against 3.2.1. Also I can't be sure on dates exactly, but <span style="font-size: 13px;">I think this worked against 3.3-SNAPSHOT early last week.</span></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;">What might I be missing? Is there anything I can share from the logs to help explain the issue better?</div><div id="bloop_customfont" style="color: rgb(0, 0, 0); font-family: Bookerly, Arial; font-size: 13px; margin: 0px;"><br></div></div></body></html>