Possible bug with defining AuthenticationFlows in relying-party.xml

[Travis Schmidt]

It looks like removing the initial works for me.  So without it, will the
order of flows chosen be how they are listed in the reg ex or the order in
general-authn.xml?

Thanks
Travis

On Tue, Jan 5, 2016 at 2:31 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Yes, so I have
> > idp.authn.flows= Password|Duo|PwdDuo
> >
> > and
> >
> > idp.authn.flows.initial = Password
>
> Yeah, so I would imagine initial is breaking. The same winnowing occurs at
> both points, so you have it directing the profile to use a method that's
> not active. You really can't combine the initial login method feature with
> a lot of the rest of the options without ending up with problems. Just
> wasn't a well-thought out feature, I implemented it as a half-step to
> support some of the things people demanded that I knew wouldn't work
> otherwise.
>
> I think it's questionable that the initial login flow is honoring the
> authenticationFlows property. I reviewed the code and was a bit surprised
> it was doing that.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160105/50f9694b/attachment.html>