LDAP password authn flow interception

[O'Dowd, Josh]

Thanks for your quick  responses and I don't mean to keep bothering on this, but in looking at the context-check-intercept, it seems we would just be getting an error message that I could map to a view, but would not get the user back to the SP.  Is that accurate?

So I think I need to do a separate intercept flow that:
	- checks for the attribute
	- if missing, shows a form-view for the user to set security Q&A
	- on submit, write the data to the directory
	- send user back to the authn flow

...  similar to the exiring-password-flow.  I know how to do all of those things.  Where I get fuzzy is how to implement a custom intercept flow.

I see the /conf/intercept/intercept-event.xml and I see in the thread to the other gentleman, the option you gave him to do a new flow using the /flow/intercept directory, but I don't see a flow intercept directory.  If I add one and put a flow xml into it for the above-described sub-flow, how does it get called,  automatically or something we configure?

I hope this isn't too far-fetched.  Thanks again for your time.

Josh

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, July 29, 2015 4:32 PM
To: Shib Users
Subject: Re: LDAP password authn flow interception

On 7/29/15, 6:05 PM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:



>... is that what you are referring to, and, by chance have you busy fellas had a chance to document that yet, somewhere?  If not,  any quick pointers would be much appreciated.

No, there's nothing really. If you're just trying to check an attribute, then I have the same answer I gave then, just use the context-check intercept that's already installed and use the attribute checking condition example that's commented out in context-check-intercept-config.xml to check for whatever you want to check.

-- Scott

>
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net