Displaying a simple error page from a flow

Leite, Zailo S. zleite at caltech.edu
Mon Apr 24 17:24:39 EDT 2017


The upgrade to 3.3.1 broke this for me. I had to add my custom event
(userNotEntitled) to system/flows/authn/authn-abstract-flow.xml :

<global-transitions>
   ...
   <transition on="userNotEntitled" to="userNotEntitled" />
</global-transitions>

Z

On Fri, 2016-12-16 at 21:19 +0000, Wessel, Keith wrote:
> Circling back around. Scott mentioned to me yesterday that there's an easier way to do this after all that he'd forgotten about. The multiFactorAuthenticationContext class does have a setEvent method, and that does the trick. In short:
> 
> Have your MFA script call mfaCtx.setEvent("someCustomEvent") then return null for the next flow. Add the custom event to conf/authn/authn-events-flow.xml. Finally, either handle the event inside error.vm or create a different velocity template and link your event to it in conf/errors.xml.
> 
> No need to create a custom flow.
> 
> Tested and working for me.
> 
> Thanks for finding this, Scott.
> 
> I still intend to file an issue for fixing the included example script and its logic for getting the subject. Haven't done that yet.
> 
> Keith
> 
> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
> Sent: Friday, December 09, 2016 2:30 PM
> To: Shib Users <users at shibboleth.net>
> Subject: Re: Displaying a simple error page from a flow
> 
> On 12/9/16, 3:22 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:
> 
> > It seems that this is executing without errors, but it's not returning a principal to then do attribute resolution on.
> 
> You're not calling the function, you're setting the function itself as the principal name.
> 
> > Before I throw in more debugging, can you tell me what I should be passing to the resCtx.setPrincipal method, please?
> 
> custom["usernameLookup"].apply(input)
> 
> -- Scott
> 
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list