authn flows and entityIDs

[Schwoerer, Brad]

I am making use of AuthHandlers and AccountState to get back some password policy items like ExpiringPassword.  I would like to be able to skip the expiring-password flow message if the user is going to a specific entityID.  I will keep digging, but was wondering if anyone had an example expression to use to affect flow based upon entityID.  It seems like it should be something along the lines of looking for session (below), I just need to find the correct subcontext.

    <!-- Check for an existing session, and do additional steps in that case. -->
    <decision-state id="TestForSession">
        <if test="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.session.context.SessionContext)) != null and opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.session.context.SessionContext)).getIdPSession() != null"
            then="SessionExists"
            else="FilterFlows" />
    </decision-state>



-Bradley

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150707/15c66b61/attachment-0001.html>