IDP3 authn intercept question

[Cantor, Scott]

On 9/30/15, 3:36 PM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

>>Alternatively you could build a login flow that just calls the password flow, and then supplements processing after a proceed result from it, that's a fairly simple thing to do.
>
>This is an 'I just quickly read some available docs' guess, but are we talking about adding a new bean to conf/authn/general-authn.xml where the ID might be 'authn/my-password' and a parent that is 'shibboleth.AuthenticationFlow' to get things started?  Am I on the right track?

That's the machinery to define the flow to the IdP so it can get run, the flow itself is a webflow like the existing ones are.

A totally drafty example of a login flow definition that calls the Password flow is something like the following. Whatever you're doing in the intercept flow, which I guess you already have written, you could probably transplant into a login flow after the subflow-state returns.

-- Scott

<flow xmlns="http://www.springframework.org/schema/webflow"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://www.springframework.org/schema/webflow http://www.springframework.org/schema/webflow/spring-webflow.xsd"
      parent="authn.abstract">

    
    <subflow-state id="DoPasswordFlow" subflow="authn/Password">
	<input name="calledAsSubflow" value="true" />
	<transition on="proceed" to="MyState" />
</subflow-state>

    
    <action-state id="MyActionState">
	<evaluate expression="MyActionState" />
	<evaluate expression="'proceed'" />
    
	<transition on="proceed" to="MyView" />
    </action-state>

<view-state id="MyView" view="myview">
	<transition on="proceed" to="proceed" />
</view-state>

    
</flow>