IDP3 authn intercept question

[O'Dowd, Josh]

Good Morning,

We have a post-authn intercept with a flow that provides a user form.  When the intercept-flow is engaged, authentication has already been achieved.  In other words if the user ignores the form and navigates to the service page,  they would already have a session.

What we want to do is complete the authenticated redirect ONLY if the user successfully submits the form presented by our intercept-flow.

I already have an existing method building an AuthenticationResult and placing the Subject into the c14n context, which we use for another process, so I understand how to build an authentication where none exists.  So, for this purpose, can we then safely negate the authentication until the form is done, by removing the AuthenticationResult from the AuthenticationContext, and the Subject from the SubjectCanonicalizationContext?  Or, are there other factors at play here?

As always, thanks for your time.


Josh O'Dowd
Software Systems Analyst / Developer
University of Montana, IT Central
(406)243-6283

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150930/ee496556/attachment.html>