Duo IdPv3.3 c14n null principal.

[Cantor, Scott]

> Are you saying that the 'conditions' functionality that is tied to the
> shibboleth.authn.Password.ClassifiedMessageMap may be phased out at
> some point?  That really is the only reliance that we have on the internals of
> the Password login flow, by matching keys from the map to transitions in the
> conditions-flow.xml.

No, the stuff you're doing to fool it into turning a failure into success is what's implementation specific. That is not a supported feature.

-- Scott