LDAP password authn flow interception

[O'Dowd, Josh]

Is it possible to interrupt the Password-authn-flow after a successful authn?  I am having the LDAP return an attribute, 'securityQuestion' from the authn bind using the idp.authn.LDAP.returnAttributes property because I need to verify that this attribute has been set in the directory before allowing authn completion to continue.

My original idea  was to use the classifiedMessageMap for an event to trigger the conditions-flow but it looks like that is constrained to ldap error codes only.  Is there a success key that I could use?

Thanks again for your time.

Josh O'Dowd
Software Systems Analyst / Developer
University of Montana, IT Central
(406)243-6283

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150729/c376d5ee/attachment.html>