<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,</p>
<p>I'd like to configure an intercept onto my IDP so that a user
matching some specific criteria would be automatically redirected
towards a static HTML page.</p>
<p>I succeeded to acheive that behaviour while configuring an
intercept of type "Post-authentication" like this :<br>
</p>
<p><b><i>/conf/relying-party.xml<u> </u></i></b><br>
</p>
<p><font color="#1a5fb4"> <bean
id="CAS.LoginConfiguration_custom"
class="net.shibboleth.idp.cas.config.impl.LoginConfiguration"<br>
p:servletRequest-ref="shibboleth.HttpServletRequest"
<br>
p:ticketValidityPeriod="60000" <br>
p:p:postAuthenticationFlows="regulation" /></font></p>
<p><b><i>/conf/intercept/regulation-intercept-config.xml</i></b></p>
<p><font color="#1a5fb4"> <bean
id="shibboleth.regulation.Condition"
parent="shibboleth.Conditions.AND"><br>
<constructor-arg><br>
<list><br>
<bean
class="net.shibboleth.idp.profile.logic.SimpleAttributePredicate"
p:useUnfilteredAttributes="true"><br>
<property name="attributeValueMap"><br>
<map><br>
<entry key="id"><br>
<list><br>
<value>john.doe</value><br>
</list><br>
</entry><br>
</map><br>
</property><br>
</bean><br>
</list><br>
</constructor-arg><br>
</bean></font><br>
</p>
<p><u>But my intention is to make interception based on the Inbound
message processing </u>(<i><font color="#1a5fb4">p:inboundInterceptorFlows</font></i>)
so that no SSO session is created since it is useless. The user
would be immediately (after authentication) to the static HTML
page.</p>
<p>Is this possible ? How do I configure the condition bean (from
the file <b><i>regulation-intercept-config.xml</i></b>) in order
to extract the principal name of the just authenticated user (to
notice : the authn/RemoteUser login flow is configured) ?</p>
<p>Thanks for helping me,</p>
<p>BR,<br>
</p>
<p><br>
</p>
<p><br>
</p>
</body>
</html>