Where to hook in switching of user identity

[Cantor, Scott]

> So just tacking the user-switching action on the end of (the copy of) the
> (LDAP?) password flow?

Yes.

> I already have to modify a flow to collect the additional fields.

Right.

> Wherever makes the most sense.  Definitely prefer to avoid "voiding the
> warranty" and making upgrades harder by messing with system/ stuff.

The login flow contract is stable and part of the API. When I moved c14n around in trunk, I had to maintain things so that existing flows kept working.

The problem with custom login flows is copying the action beans that are implementation classes. The only 100% safe customization is a custom login flow that relies only on API classes, even if it's just by copying classes into an extension package.

OTOH, you will find that the total number of action beans in the LDAP flow is not huge, so it's not exactly copying all that much code. Pretty much just two actions, collecting the credentials and validating them I think.

-- Scott