IDP3 authn intercept question

[O'Dowd, Josh]

Thanks Scott,

In my own defense, I did know there was a flow involved I just didn't want to lay out the whole idea if I wasn't on the right track In the first place. ..  That being said, I really appreciate the example, and just a couple quick final questions:

1.  In the interest of staying out of the /system directory, can this new login flow live under /conf/flows/authn and is there a file naming convention for the flow, like {name}-authn-flow.xml?

2.  Will the idp.authn.flows property need to be changed from 'password' to the new flow ID (sans authn/)?

-Thanks again
-Josh


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, September 30, 2015 2:03 PM
To: Shib Users
Subject: Re: IDP3 authn intercept question

On 9/30/15, 3:36 PM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

>>Alternatively you could build a login flow that just calls the password flow, and then supplements processing after a proceed result from it, that's a fairly simple thing to do.
>
>This is an 'I just quickly read some available docs' guess, but are we talking about adding a new bean to conf/authn/general-authn.xml where the ID might be 'authn/my-password' and a parent that is 'shibboleth.AuthenticationFlow' to get things started?  Am I on the right track?

That's the machinery to define the flow to the IdP so it can get run, the flow itself is a webflow like the existing ones are.

A totally drafty example of a login flow definition that calls the Password flow is something like the following. Whatever you're doing in the intercept flow, which I guess you already have written, you could probably transplant into a login flow after the subflow-state returns.

-- Scott

<flow xmlns="http://www.springframework.org/schema/webflow"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation="http://www.springframework.org/schema/webflow http://www.springframework.org/schema/webflow/spring-webflow.xsd"
      parent="authn.abstract">

    
    <subflow-state id="DoPasswordFlow" subflow="authn/Password">
	<input name="calledAsSubflow" value="true" />
	<transition on="proceed" to="MyState" /> </subflow-state>

    
    <action-state id="MyActionState">
	<evaluate expression="MyActionState" />
	<evaluate expression="'proceed'" />
    
	<transition on="proceed" to="MyView" />
    </action-state>

<view-state id="MyView" view="myview">
	<transition on="proceed" to="proceed" /> </view-state>

    
</flow>

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net